# Legal Counsel, Privacy, AI, & Digital Governance **Company**: BambooHR **Location**: Utah **Work arrangement**: hybrid **Experience**: senior **Job type**: full-time **Category**: Legal **Industry**: Technology **Apply**: https://job-boards.greenhouse.io/bamboohr17/jobs/6104265004?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply **Canonical**: https://yubhub.co/jobs/job_53b77850-daf ## Description We are seeking a Legal Counsel, Privacy, AI, & Digital Governance to join our team at BambooHR. As a Utah-based hybrid position, you will be required to have some regular in-office days each week. At BambooHR, we're building a people intelligence platform that transforms HR and sets people free to do great work. We're a proven market leader driving innovation while building lasting success through thoughtful, sustainable growth. As our Associate Legal Counsel, you will report to the Associate General Counsel, Privacy, AI, and Digital Governance and partner closely with cross-functional stakeholders to support BambooHR's privacy and AI governance initiatives. You will help translate legal and regulatory requirements into actionable business practices, contribute to innovative solutions, and support the development of policies, processes, and controls that promote trust, transparency, and responsible innovation. Responsibilities: - Partner with and support the Associate General Counsel, Privacy, AI, and Digital Governance in executing legal, operational, and transactional program activities that advance a regulator-ready privacy and AI governance program. - Manage annual updates to privacy program documentation, including privacy notices, customer contract addendums, policies, and other templates, ensuring materials remain current, accurate, and audit-ready. - Manage legal review and escalations for privacy and AI rights requests and support day-to-day adherence to applicable privacy regulations, maintaining organized and defensible records of program activities. - Work with cross-functional stakeholders throughout BambooHR on a variety of AI, privacy, and data protection matters , including incident response, risk assessments, and control gap remediation , with clear escalation to the AGC on matters with significant legal exposure or strategic implications. - Support privacy program operations related to marketing technologies, website operations, cookie consent management, and data collection practices, balancing business enablement with regulatory defensibility. - Assist AGC in identifying and addressing privacy and AI-related legal considerations, serving as a practical and solutions-oriented resource that enables BambooHR's AI-first objectives while building the governance guardrails needed to sustain them. - Support adherence with GDPR, CCPA/CPRA, emerging U.S. state privacy laws, and evolving AI regulatory frameworks, proactively monitoring developments and flagging material changes that warrant AGC attention or program-level updates. - Assist with conducting privacy and AI impact assessments and assist with risk evaluation and mitigation efforts, exercising sound judgment about when to escalate issues, propose alternatives, or seek direction from the AGC before proceeding. - Monitor legal and regulatory developments related to privacy, data protection, and artificial intelligence, and provide practical guidance to internal stakeholders. Requirements: - Juris Doctor (J.D.) degree or equivalent legal experience. - 3–5 years of experience supporting privacy, data protection, AI governance, cybersecurity, or technology-related functions. - Working knowledge of privacy laws and regulations, including GDPR, CCPA/CPRA, HIPAA, GLBA, and other emerging privacy requirements. - A strong interest in AI governance, AI risk management, or emerging AI regulatory frameworks. - Ability to interpret legal and regulatory requirements and translate them into practical business solutions. - Strong project management and organizational skills with the ability to manage multiple priorities simultaneously. - Excellent written and verbal communication skills. - Strong attention to detail and analytical problem-solving abilities. - Collaborative mindset and ability to work effectively across multiple business functions. Nice to Have: - Experience supporting privacy programs within a SaaS or high-growth technology company. - Experience conducting privacy impact assessments, AI risk assessments, or vendor reviews. - Experience managing transactional privacy operations such as policy development, training, incident response, vendor risk management, and appropriate data use. - Familiarity with AI governance frameworks such as the NIST AI Risk Management Framework, ISO standards, or emerging AI regulations. - Experience partnering with cross-functional teams, such as Legal, Security, Risk, Security, and Product teams to operationalize regulatory requirements. - In-house experience supporting privacy, security, or responsible AI initiatives. - Passion for helping organizations build trustworthy, and responsible technology and governance practices Benefits: - Comprehensive health, life, and disability insurance - Generous leave policies that include 4 weeks of vacation, 12 company holidays, parental leave, and volunteer time off - 401k plans with up to 6% company match - $2000 Paid-Paid Vacation bonus - EAP through Headspace ## Skills ### Required - GDPR - CCPA/CPRA - HIPAA - GLBA - AI governance - privacy laws - data protection ### Nice to have - NIST AI Risk Management Framework - ISO standards - AI risk assessments - vendor reviews --- Source: [Apply at job-boards.greenhouse.io](https://job-boards.greenhouse.io/bamboohr17/jobs/6104265004?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply)