← All roles

Senior Privacy Counsel

Abnormal AI· Legal
Apply on company site
Remote$199.8k - $235kfull-timePosted 2mo ago

About the role

Senior Privacy Counsel to own significant portions of Abnormal AI's global privacy program, advise product and engineering on privacy for an AI-native platform, support AI governance from legal/privacy perspectives, and help build AI-enabled privacy tooling and workflows.

Responsibilities

  • Global privacy program execution. Support design and implementation of Abnormal's global privacy program across GDPR/UK GDPR, EU AI Act, NIS2, DORA, EU Data Act, US state privacy laws, and other frameworks; advise on international data transfer strategy (SCCs, UK IDTA, EU–US Data Privacy Framework, transfer impact assessments).
  • AI governance execution. Drive day-to-day AI governance from legal/privacy perspective with R&D, Security, and governance stakeholders.
  • Privacy by Design for AI products and product counseling. Embed privacy into design of AI-driven features; set diligence standards for AI/LLM vendors and model providers; provide ongoing product and privacy legal counseling to R&D.
  • Privacy operations. Oversee DSARs, data mappings, DPIAs/PIAs/TIAs/LIA, retention, consent/cookies, and audit support; contribute to privacy governance forums.
  • Build and operate AI automation. Design, prototype, and iterate AI-enabled privacy workflows with Legal Operations and engineering; build tooling with high accuracy and human-review standards.
  • Legal & Regulatory Horizon Scanning. Monitor developments in privacy and AI regulation; inform market entry and execution decisions.
  • Vendor, subprocessor, and customer contracts (escalation point). Serve as privacy escalation point for DPAs, SCCs, subprocessor terms; set privacy positions.
  • Incident and breach response. Advise on privacy and legal aspects of incident response, including AI incidents and breach notifications.
  • Data Protection Officer support & regulatory engagement. Support DPO, serve as privacy contact for inquiries and audits, track regulatory developments, translate changes into action.

Qualifications

  • J.D. from an accredited law school and member in good standing of at least one U.S. state bar.
  • CIPP/E, CIPP/US certifications
  • 6-8+ years of relevant experience with strong depth in privacy and data protection law and program execution.
  • Deep, current expertise in European privacy and digital regulation (GDPR/UK GDPR) and familiarity with NIS2, DORA, EU AI Act, EU Data Act; experience in AI/tech companies (cybersecurity, SaaS, cloud)
  • Meaningful experience contributing to and helping run a privacy program in a fast-moving, global environment; product legal counseling alongside privacy.
  • Pragmatic judgment, strong drafting and ability to set positions; excellent communication and presentation skills; fluency with AI tooling and ability to build/iterate on automation workflows.

Skills

Required:Privacy program managementProduct counseling in privacyDPA, SCCs, subprocessor terms draftingAI/LLM vendor diligenceRegulatory horizon scanning

Benefits

  • Competitive salary, benefits, and equity, with path to greater program ownership as the program scales.
Last updated Aug 29, 2026. Interested? Apply on the company site.

About Abnormal AI

The Behavioral Security Platform for the AI era.

AI SecurityAbnormal Behavioral Security PlatformBehavioral SecurityEmail SecurityIdentity SecurityInsider ThreatPlatformenterprise-infrastructure
Company profileWebsite

More open roles at Abnormal AI