Senior Counsel, Privacy and Regulatory

Rozgoo; San Francisco (CA); On-site; USD 180,000 - 240,000; Full time

Job summary

Fastly is seeking a Senior Privacy and Regulatory Counsel to lead our privacy program and provide legal guidance on artificial intelligence, data protection, and emerging regulatory topics. This role reports to the Assistant General Counsel and will be based in San Francisco, CA, with a preference for a Bay Area presence.

You will partner with product and engineering to deliver privacy-by-design, manage global regulatory engagements, design internal policies and trainings, and support DPIAs,

Qualifications

• JD from a respected institution and membership in good standing with at least one U.S. state bar.
• 8+ years of relevant legal experience, with significant in-house experience advising on global privacy and regulatory matters at a technology company, especially in the cloud or SaaS space.
• Regulatory Exp

Responsibilities

• Architect, scale, and lead a global privacy program, managing stakeholder engagement across the company
• Manage compliance strategy for emerging regulatory and technical issues related to cutting-edge products and new jurisdictions, including evolving cybersecurity, critical infrastructure, and AI regulations (e.g., NIS2, CRA, ISP-specific frameworks, global privacy laws)
• Design and drive internal company policies, external assets, and sales collateral addressing global privacy, data protection, and other regulatory frameworks (e.g., GDPR, EU Data Act, EU AI Act)
• Respond to regulatory inquiries and investigations, and collaborate with outside counsel where specialized jurisdictional expertise is required
• Partner closely with product and engineering teams to provide end-to-end legal guidance on product and feature development, incorporating "privacy by design" and similar principles
• Serve as our subject matter expert on privacy and other relevant regulations in complex customer, partner and vendor negotiations, including reviewing, drafting and negotiating agreements in collaboration with other Legal and business partners
• Partner with our People team to advise on global employee data protection, workforce privacy initiatives, and talent-related privacy matters
• Independently manage the legal response to privacy-related incidents
• Draft and maintain policies, playbooks, checklists, FAQs, and training materials to improve process and streamline stakeholder engagement on privacy and regulatory matters
• Oversee and conduct Data Protection Impact Assessments (DPIAs), maintain Records of Processing Activities (RoPAs), and support audits, law enforcement requests, and platform-abuse process and policy

Job description

Fastly helps people stay better connected with the things they love. Fastly’s edge cloud platform enables customers to create great digital experiences quickly, securely, and reliably by processing, serving, and securing our customers’ applications as close to their end-users as possible — at the edge of the Internet. The platform is designed to take advantage of the modern internet, to be programmable, and to support agile software development. Fastly’s customers include many of the world’s most prominent companies, including GitHub, Yelp, Paramount, and JetBlue.

We're building a more trustworthy Internet. Come join us.

Senior Privacy and Regulatory Counsel

We are looking for a Senior Privacy and RegulatoryCounsel to join our Legal team. The person will lead our privacy program and provide legal guidance around artificial intelligence, data protection, and other emerging regulatory topics. This is a great opportunity for a thoughtful, pragmatic, and collaborative attorney with strong business instincts who wants to help shape innovative edge cloud technologies. We are seeking candidates who value working on a strong and diverse team and want to contribute to creating a welcoming, inclusive and supportive environment. This position reports to the Assistant General Counsel leading the Product, Technology, and Regulatory team, and will be based out of one of our offices with a preference for San Francisco, CA.

What You'll Do:

• Domain Leadership: Architect, scale, and lead a global privacy program, managing stakeholder engagement across the company
• Regulatory Strategy: Manage compliance strategy for emerging regulatory and technical issues related to cutting-edge products and new jurisdictions, including evolving cybersecurity, critical infrastructure, and AI regulations (e.g., NIS2, CRA, ISP-specific frameworks, global privacy laws)
• Policy Management: Design and drive internal company policies, external assets, and sales collateral addressing global privacy, data protection, and other regulatory frameworks (e.g., GDPR, EU Data Act, EU AI Act)
• Regulator Engagement: Respond to regulatory inquiries and investigations, and collaborate with outside counsel where specialized jurisdictional expertise is required
• Product Counseling: Partner closely with product and engineering teams to provide end-to-end legal guidance on product and feature development, incorporating "privacy by design" and similar principles
• Commercial Negotiations: Serve as our subject matter expert on privacy and other relevant regulations in complex customer, partner and vendor negotiations, including reviewing, drafting and negotiating agreements in collaboration with other Legal and business partners
• Talent Support: Partner with our People team to advise on global employee data protection, workforce privacy initiatives, and talent-related privacy matters.
• Incident Management: Independently manage the legal response to privacy-related incidents
• Process & Training: Draft and maintain policies, playbooks, checklists, FAQs, and training materials to improve process and streamline stakeholder engagement on privacy and regulatory matters
• Operational Support: Oversee and conduct Data Protection Impact Assessments (DPIAs), maintain Records of Processing Activities (RoPAs), and support audits, law enforcement requests, and platform-abuse process and policy

What We're Looking For:

• Education & Credentials: JD from a respected institution and membership in good standing with at least one U.S. state bar
• Experience: 8+ years of relevant legal experience, with significant in-house experience advising on global privacy and regulatory matters at a technology company, especially in the cloud or SaaS space
• Regulatory Exp