Responsibilities

• Draft and negotiate privacy and security clauses and contracts.
• Conduct due diligence on existing and new suppliers through privacy and AI risk assessments.
• Design, build, and implement AI-powered legal tools and lightweight integrations that automate legal workflows, improve accuracy, and expand team capacity.
• Assess new product features for privacy and AI risks and collaborate with Product and Engineering teams to develop and implement mitigating controls.
• Draft new and update existing data protection and AI-related policies and procedures.
• Provide advice and guidance on tactical and strategic product and privacy matters to business teams ensuring compliance with laws and contractual commitments.
• Help develop and maintain all aspects of Contentful’s privacy and AI governance programs.
• Respond to third party and employee inquiries regarding data rights and processing activities.
• Create records of processing activities.
• Work on cross-functional projects to develop and implement company-wide workflows and processes.
• Analyze new data protection and AI laws and regulations and help develop and implement compliance initiatives.

Requirements

• 1-3 years relevant legal experience.
• Experience with SaaS and AI technologies and a curious, experimental mindset.
• Knowledge of global privacy and AI laws, including GDPR and the EU AI Act.
• Foundational knowledge of common cybersecurity concepts and terms.
• Experience advising clients on risk mitigation across technology product platforms.
• Excellent judgment, analytical rigor, clear communication, and business pragmatism.
• Strong writing skills with attention to detail.
• Solution-oriented approach in working with business teams.
• Experience working with cross-functional teams.
• CIPP certification.