Director, Product and Privacy

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Director, Product and Privacy based in the United States.

We are seeking an experienced product and privacy lawyer to guide the development and deployment of innovative AI-powered products across multiple industries. In this senior individual contributor role, you will work closely with Product, Engineering, Security, Marketing, and business teams to integrate legal and privacy considerations throughout the product lifecycle. You will lead practical privacy and AI governance initiatives, translating complex regulatory requirements into scalable processes and actionable product guidance. Your work will span healthcare, automotive, home services, messaging, and payments, helping teams innovate responsibly while managing legal and regulatory risks. Reporting to the General Counsel, you will have significant ownership and direct influence on product strategy and business decisions. This opportunity is ideal for a strategic legal professional who combines deep technical and regulatory knowledge with a pragmatic, collaborative approach to emerging technologies.

You will provide strategic legal counsel on product development, privacy, AI governance, and industry-specific compliance, ensuring that innovative products are designed and deployed responsibly across applicable markets.

• Partner with Product, Engineering, AI, Security, Marketing, Partnerships, and Legal teams to understand product strategies, roadmaps, and initiatives, providing guidance from early design through launch, deployment, and ongoing monitoring.

• Advise on product compliance matters involving artificial intelligence, privacy, data rights, intellectual property, consumer protection, and applicable regulatory requirements.

• Structure, negotiate, and review agreements with AI providers, data partners, and integration partners, including product terms, data processing agreements, and business associate agreements.

• Guide product design and modifications by identifying legal and regulatory risks, recommending mitigation strategies, reviewing user experiences and disclosures, and translating legal guidance into implementable product requirements.

• Develop and operationalize scalable product, privacy, and AI review processes, including impact assessments, launch criteria, playbooks, escalation paths, and compliance controls.

• Monitor evolving privacy and AI regulations, conduct gap assessments, and translate new requirements into prioritized product and operational improvements.

• Lead cross-functional privacy initiatives involving data mapping, permitted data uses, data retention and deletion, and tracking technologies.

• Collaborate with Security on incident response and the privacy aspects of compliance assessments and due diligence reviews.

• Establish AI governance practices for customer-facing AI agents and internal AI applications, covering data sourcing and usage rights, model fine-tuning and evaluation, third-party model terms, output ownership, and safeguards against inaccurate outputs.

• Advise on AI agent permissions, customer configurations, disclosures, human oversight, escalation mechanisms, auditability, and the allocation of responsibilities among the organization, model providers, integration partners, and customers.

• Support healthcare product development by advising on HIPAA privacy and security requirements, business associate agreements, sensitive health data, electronic medical record integrations, access controls, and patient communications.

• Counsel on automotive and home services workflows, including CRM and dealer management integrations, lead sourcing and re-engagement, appointment booking, service scheduling, and representations concerning pricing, financing, and services.

• Assess sector-specific requirements, including the Gramm-Leach-Bliley Act (GLBA), Fair Credit Reporting Act (FCRA), payments regulations, and other applicable obligations based on product features and data use.

• Advise on voice, messaging, and marketing compliance, including the Telephone Consumer Protection Act (TCPA), telemarketing and do-not-call rules, consent and opt-out mechanisms, call recording and transcription, and AI-generated voice.

• Review product claims and customer-facing guidance to ensure accurate representations of product capabilities, limitations, and customer responsibilities.

• Provide legal guidance on payments and fintech products, including consumer disclosures, fraud, chargebacks, financial services requirements, and payment network rules.

• Partner with Product and Finance to clarify and allocate compliance responsibilities among the organization, customers, and financial partners.

• Use AI tools thoughtfully in legal work to improve efficiency and quality while verifying outputs and protecting confidential information.

Requirements:

The ideal candidate is a seasoned technology lawyer with substantial in-house experience, strong privacy credentials, and the ability to translate complex legal issues into practical guidance that supports responsible product innovation.

• Juris Doctor (J.D.) degree, strong academic credentials, and a demonstrated record of legal success.

• Membership in a relevant state bar or eligibility to register as Registered In-House Counsel.

• At least 8 years of legal experience, including a minimum of 5 years in an in-house role, preferably within a high-growth technology company.

• Experience advising product teams on compliance with regulatory frameworks applicable to U.S. and global telecommunications.

• Familiarity with regulations affecting other industries and markets, particularly healthcare, automotive, and home services.

• Experience advising on risk mitigation for technology platforms, especially AI, payments, messaging, and telecommunications products.

• A recognized privacy certification, such as CIPP/US, CIPP/E, CIPM, or CIPT.

• Strong knowledge of privacy and data protection laws, including CCPA, CPRA, GDPR, TCPA, and other applicable U.S. state and federal privacy, data security, and international data protection requirements.

• Ability to identify emerging legal issues, think strategically, and develop sustainable, long-term solutions.

• Proven ability to manage multiple assignments simultaneously and lead complex projects through successful completion.

• Excellent written and verbal communication skills, with a strong customer-focused approach.

• Strong interpersonal, presentation, and facilitation skills, with the ability to collaborate effectively across teams and navigate complex corporate environments.

• Demonstrated ability to use AI tools responsibly in legal work, validate their outputs, safeguard confidential information, and improve the speed and quality of legal advice.

Benefits:

• Comprehensive healthcare: Medical, dental, and vision benefits.

• Insurance coverage: Life insurance and short- and long-term disability coverage.

• Paid parental leave: Support for employees and their families.

• Fertility benefits: Access to fertility-related support.

• Generous time off: Generous vacation allowance and three four-day summer holiday weekends.

• Retirement savings: Access to a 401(k) plan.

• Company culture: An open and transparent working environment.

• Company merchandise: Two annual merchandise and apparel distributions.

• Fitness facilities: Access to an on-site headquarters gym in Utah, with professional coaches and fitness classes.

• Childcare support: An on-site childcare center at the Utah headquarters, subsidized for employees.

We use an AI-powered matching process to ensure your application is reviewed quickly, objectively, and fairly against the role's core requirements. Our system identifies the top-fitting candidates, and this shortlist is then shared directly with the hiring company. The final decision and next steps (interviews, assessments) are managed by their internal team.

We appreciate your interest and wish you the best!

 Why Apply Through Jobgether? 

Data Privacy Notice: By submitting your application, you acknowledge that Jobgether will process your personal data to evaluate your candidacy and share relevant information with the hiring employer. This processing is based on legitimate interest and pre-contractual measures under applicable data protection laws (including GDPR). You may exercise your rights (access, rectification, erasure, objection) at any time.

#LI-CL1