Senior Data Privacy Counsel (Remote)

Kit; United States; Remote; USD 227,000 - 252,000; Full time

Benefits offered by this job

Profit Sharing

Kit equity

401k with a 5% match

Health insurance (Aetna)

Equipment allowance

Learning budget

Gender affirming benefits

Childcare benefit

Paid time off

Paid vacation bonus

Paid holidays

Paid sick time

Parental leave

Winter Break Closure

Sabbatical

Team retreats

Job summary

Kit is an entirely remote company supporting creators with a comprehensive creator marketing platform. This Senior Legal Counsel will serve as the in-house expert on privacy, data, AI and compliance, partnering with the executive team to drive product legal strategy and scalable processes.

The role requires deep knowledge of GDPR/CCPA, security questionnaires, and commercial contracts across multiple revenue streams including SaaS, digital commerce, and advertising.

Qualifications

• In-house counsel experience at a tech company or top-tier firm known for startups.
• J.D. from a US law school
• Active State Bar membership

Responsibilities

• Lead product legal strategy across privacy, data, AI and compliance.
• Advise on commercial contracts, vendor security, and customer privacy questionnaires.
• Develop scalable privacy playbooks, intake processes, and self-service guidance.
• Collaborate with product, engineering, security, and GTM teams to move quickly while managing risk.

Skills

Data privacy

Compliance

Product knowledge

GDPR

CCPA

Playbooks

Security questionnaires

SOC 2 Type II

Intellectual property

Commercial contracts

Communication

Education

J.D. from a US law school

Active State Bar admission

Tools

Top-tier law firms experience

In-house experience

Job description

Kit is an entirely remote company supporting creators with a comprehensive creator marketing platform. This Senior Legal Counsel will serve as the in-house expert on privacy, data, AI and compliance, partnering with the executive team to drive product legal strategy and scalable processes.

The role requires deep knowledge of GDPR/CCPA, security questionnaires, and commercial contracts across multiple revenue streams including SaaS, digital commerce, and advertising.