Sr Data Privacy & AI Counsel

Quickbase; Massachusetts; On-site; USD 122,000 - 192,000; Full time

Benefits offered by this job

Annual incentive plan

Comprehensive benefits (medical,Dental

401(k) matching

Job summary

Quickbase is seeking a Sr Counsel, Privacy & AI Counsel to serve as the primary legal advisor on privacy, data security, and AI governance matters. The role reports to the General Counsel and will build and maintain privacy and AI compliance programs, advise product and engineering teams on data practices, and manage one direct report.

You will lead privacy and security incident response, draft and negotiate data processing agreements, and partner with information security on risk assessments

Qualifications

• JD from an accredited law school; active bar membership in good standing.
• 5-7+ years of legal experience with at least 3 years in privacy, data security, or technology law.
• Knowledge of major privacy frameworks (CCPA/CPRA, GDPR, HIPAA as applicable) and AI regulatory developments.
• Experience with incident response and breach notification processes.
• Certifications such as CIPP/US, CIPP/E, or CIPM preferred.

Responsibilities

• Advise on global privacy and data protection laws, including data subject rights and cross-border transfers.
• Develop and maintain the company’s AI governance framework and related policies.
• Lead privacy and security incident response and regulatory reporting.
• Draft and review data processing agreements, BAAs, and privacy provisions.
• Coordinate with information security on risk assessments and certifications (SOC 2, ISO 27001).
• Manage regulatory inquiries and enforcement actions from data protection authorities.
• Conduct privacy and AI risk assessments for new products and vendors.
• Monitor regulatory developments and translate them into actionable guidance.
• Build and deliver training on data handling, privacy obligations, and responsible AI use.
• Mentor and develop the GRC Analyst.

Skills

Privacy law

Data security

AI governance

Regulatory analysis

Incident response

Mentoring

Education

J.D.

Job description

Title: Sr Counsel, Privacy & AI Counsel

Reports to: General Counsel

Location: Remote, US

Department: Legal

Overview

This role serves as the primary legal advisor on privacy, data security, and AI governance matters. The Corporate Counsel will build and maintain the company’s privacy and AI compliance programs, advise product and engineering teams on data practices, and manage one direct report (GRC Analyst).

Responsibilities

• Advise on global privacy and data protection laws (CCPA/CPRA, state privacy laws, GDPR where applicable), including data subject rights, cross-border transfers, and vendor data processing
• Develop and maintain the company’s AI governance framework, including policies on responsible AI use, automated decision-making, and emerging AI regulations
• Lead privacy and security incident response, including breach notification analysis and regulatory reporting
• Draft, negotiate, and review data processing agreements, BAAs, and privacy-related contract provisions
• Partner with information security on risk assessments, security policies, and compliance certifications (SOC 2, ISO 27001)
• Manage regulatory inquiries and enforcement actions from data protection authorities
• Conduct privacy impact assessments and AI risk assessments for new products, features, and vendor implementations
• Monitor legislative and regulatory developments across privacy, cybersecurity, and AI, and translate them into actionable guidance
• Build and deliver training programs on data handling, privacy obligations, and responsible AI use
• Manage and develop GRC Analyst, setting priorities and reviewing work product

Qualifications

• JD from an accredited law school; active bar membership in good standing
• 5-7+ years of legal experience, with at least 3 years focused on privacy, data security, or technology law
• Working knowledge of major privacy frameworks (CCPA/CPRA, GDPR, HIPAA as applicable) and familiarity with AI regulatory developments (EU AI Act, NIST AI RMF, state AI legislation)
• Experience with incident response and breach notification processes
• CIPP/US, CIPP/E, or CIPM certification preferred
• Ability to translate technical and regulatory complexity into practical business guidance
• Experience managing or mentoring junior team members

How We Think About AI

At Quickbase, we view AI as a tool to accelerate how work gets done — not replace it. We encourage thoughtful use of AI to improve speed, quality, and decision-making, while maintaining strong judgment, accountability, and data integrity.

Pay Range

$121,884.70 - $191,533.10

Compensation & Benefits

Incentive Compensation This role is eligible to participate in our annual incentive plan. Incentives are earned based on employee performance against defined metrics and company goals.

Benefits Full-time roles are eligible for our comprehensive benefits program which includes medical, dental and vision coverage. You may also contribute to our 401(k) plan that includes a company match.

Equal Opportunity Statement

Quickbase is committed to building a diverse and inclusive workplace. We encourage candidates from all backgrounds to apply – even if you don’t meet every qualification listed. We are proud to be an equal opportunity employer.

Work that makes an impact

At Quickbase, we’re on a mission to transform ordinary work into extraordinary impact — for our customers, and for ourselves. We are the leading application platform for work management, helping organizations connect people, processes, and systems in one place so they can confidently manage the work that matters most. From complex, multi-system projects to everyday workflows, Quickbase brings clarity to chaos. Our platform centralizes data, automates processes, and provides real-time visibility — enabling teams to see, connect, and control their operations from day one to done. When you join Quickbase, you become part of a global community of builders, problem-solvers, and systems thinkers. We collaborate closely, move quickly, and continuously improve how work gets done – driving measurable impact at scale.