Privacy Counsel

Ovii's Interpretation of the Role

The Privacy Counsel provides legal guidance on data protection, AI governance, and commercial contracts, partnering with product, security, engineering, and sales teams to embed privacy by design across HackerOne’s global operations.

Role Snapshot

• Legal privacy guidance
• Draft & negotiate data processing agreements
• Conduct DPIAs and AI risk assessments
• Cross‑functional collaboration
• Privacy training & audit support
• Regulatory monitoring

Must-Have Requirements

• Qualified lawyer (UK or EU) with GDPR experience
• Strong knowledge of EU/UK GDPR
• Experience drafting and negotiating data processing agreements
• Ability to manage data breaches, regulatory notifications and privacy audits
• Experience using OneTrust privacy management system
• GDPR and EU privacy law experience
• Data processing agreement drafting and negotiation
• Qualified lawyer (UK or EU)
• Visa/work permit sponsorship is not available
• Background check required

Nice-to-Have Signals

• Certified Information Privacy Professional (CIPP)
• Artificial Intelligence Governance Professional (AIGP)
• German language proficiency
• Experience in cybersecurity, offensive security, or SaaS environments
• Familiarity with global privacy laws (US, Middle East, Asia)
• CIPP certification
• AIGP certification
• Cybersecurity or SaaS background
• CIPP
• AIGP

Work Setup

• Location: United Kingdom
• Work mode: REMOTE
• Remote scope: COUNTRY_RESTRICTED
• Remote countries: United Kingdom
• Employment type: Full-Time

Eligibility Gates

• Work authorization: Must be authorized to work in the UK/EU
• Visa sponsorship: no
• Background check: required

Not Specified in JD

• Travel requirement
• Security clearance

What You'll Likely Work On

• Apply AI tools responsibly to improve privacy research, drafting, and assessment workflows.
• Adapt guidance to evolving global privacy and AI regulations.
• Conduct DPIAs, AI‑DPIAs, TIAs, LIAs, and other structured risk reviews.
• Review product features and AI capabilities for privacy‑by‑design, identifying risks early.
• Draft, review, and negotiate DPAs, privacy terms, and commercial contracts for global sales and procurement.
• Maintain and update privacy contractual documentation, templates, and internal policies.
• Create and deliver internal training on privacy and AI governance.
• Support internal and external privacy audits, coordinating with advisors and ensuring remediation.

Good Fit If You Have

• Certified Information Privacy Professional (CIPP) certification
• Artificial Intelligence Governance Professional (AIGP) certification
• German language proficiency
• Experience in cybersecurity or SaaS environments