Source Job

• Lead delivery of DPIAs, ROPA build-outs, and privacy program gap assessments for global clients.
• Serve as internal authority on evolving privacy regulations including GDPR, India's DPDP Act, and EU AI Act.
• Build reusable IP such as DPIA templates, AI governance frameworks, and compliance playbooks.

Sprinto is an Autonomous Trust Platform that centralizes trust requirements across security frameworks, vendors, and customers. Backed by top-tier investors like Accel and Elevation, it is trusted by over 3,000 organizations and fosters a culture of ownership and collaboration.

• Lead Trulioo's global privacy strategy and data protection program as the designated Data Protection Officer for Europe.
• Embed privacy by design into product development, commercial contracting, and enterprise risk management.
• Partner with Product, Engineering, Legal, and go-to-market teams to drive responsible AI governance and data use.

Trulioo is a global leader in digital identity verification, enabling organizations to quickly onboard customers, optimize costs, and combat fraud. With over 5 billion people and 700 million business entities verified across 195 countries, the company is a BC Top Employer fostering an inclusive, collaborative, and people-first culture with offices in Vancouver, San Diego, and Dublin.

• Provide strategic legal guidance on AI product development and compliance with global regulations.
• Shape AI strategy and compliance, including navigating the EU AI Act, GDPR, and other privacy laws.
• Empower sales and marketing by supporting AI trust initiatives and collaborating with commercial legal teams.

Zendesk is a customer service software company that powers billions of conversations with brands worldwide. They are a global company with a hybrid work culture focused on innovation and inclusion.

• Advise on AI governance, privacy, and security law as the legal lead for Proof's privacy and AI framework.
• Partner with product, engineering, and go-to-market teams to operationalize privacy across identity data, biometrics, and notarizations.
• Manage breach response, vendor security, and regulatory inquiries with a business-minded approach.

Proof is the world's first identity-assured transaction management platform, digitizing trust for critical transactions. Developed by the same team behind Notariz℠, it has executed first digital real estate closings, mortgages, and auto sales, with a focus on security and compliance.

• Provide expert legal counsel on EU digital regulatory compliance to cross-functional stakeholders.
• Draft and implement internal policies, workflows, and risk assessments to ensure compliance with global AI, privacy, and other digital regulations.
• Convert complex legal requirements and industry standards into actionable technical and operational requirements.

Cohere is a security-first enterprise AI company that builds cutting-edge foundation models and end-to-end AI products to solve real-world business problems. They are a global team of researchers, engineers, and designers passionate about their craft, with offices in multiple countries.

• Own end-to-end management of core privacy programs including data subject requests, privacy impact assessments, and cookie compliance.
• Identify and implement process improvements, leveraging AI to automate routine tasks and maintain auditable records.
• Serve as a key connector between Privacy Legal, Privacy Engineering, and cross-functional partners to translate global privacy requirements into operations.

Stripe is a financial infrastructure platform for businesses, enabling millions of companies to accept payments and grow revenue. The company is large and mission-driven, with a culture focused on increasing the GDP of the internet.

• Own compliance with worldwide laws applicable to AI and e-commerce platforms, including GDPR contracts and assessments.
• Prepare and maintain compliance documentation, such as AI systems inventory and risk assessments under safety laws.
• Track and analyze legal developments and guide product reviews for consumer rights and data protection compliance.

EverAI is a leading AI companionship platform with 50 million users, redefining human-AI connection with its proprietary moderation system, EverGuard. The company is a top 15 largest and fastest-growing AI companies globally, with a remote team of about 75 people and a culture of ownership, velocity, and radical creativity.

• Conduct hands-on compliance audits of digital platforms against global privacy regulations such as GDPR, CCPA, and COPPA.
• Design and execute independent audit methodologies to test user protections, content moderation, and data handling practices.
• Present detailed findings and strategic recommendations to clients and their leadership through executive briefings.

Coalfire solves clients' hardest cybersecurity challenges through advisory, assessment, and automation. They are a team of passionate problem-solvers with offices across the US and UK.

• Drive partner strategy and execution for Cohere's enterprise market in Europe, aligning with regional business objectives.
• Lead partner onboarding and enablement through training programs to ensure effective selling and deployment of solutions.
• Own joint pipeline generation and co-selling with partners to pursue high-value opportunities across Europe.

Cohere is the leading security-first enterprise AI company building cutting-edge foundation models and end-to-end products. We are a global team of researchers, engineers, and designers with offices in Toronto, San Francisco, London, New York City, Montreal, Seoul, Germany, and Paris.

• Support oversight of the existing Privacy compliance program across jurisdictions, with primary focus on U.S. requirements and alignment to global privacy obligations.
• Translate Legal guidance and regulatory requirements into policies, standards, and control expectations for first-line teams.
• Provide independent oversight and effective challenge of first-line privacy control environments, including review of control design and identification of gaps.

Affirm is reinventing credit to make it more honest and friendly, giving consumers the flexibility to buy now and pay later without any hidden fees or compounding interest. They are a remote-first company with competitive benefits including health care coverage, flexible spending wallets, and stock purchase plans.

• Support privacy and security incident response activities involving personal data.
• Assess the scope and severity of incidents by analyzing affected systems, databases, and logs.
• Collaborate with cross-functional teams to address privacy risks and ensure compliance.

The company is a partner organization in the technology sector, focusing on digital payments and AI-powered solutions. The team is collaborative and remote-friendly, with a culture of innovation and professional growth.

• Handle and respond to data subject rights requests (e.g., SARs, deletion requests) within statutory timeframes and other privacy-related queries.
• Compile and maintain ROPA and other compliance documentation to support accountability obligations.
• Complete DPIAs and Legitimate Interests Assessments, liaising with stakeholders on data processing activities.

Prolific is building the human data infrastructure for AI development, connecting researchers and companies with a global pool of participants for high-quality human behavioral data. The company fosters a mission-driven, remote-first culture with a focus on ethical data sourcing.

• Oversee global direct tax compliance across multiple jurisdictions, ensuring accurate and timely filings.
• Provide strategic tax advice on international transactions and corporate structures.
• Mentor tax professionals and drive process improvements through automation and AI.

Our partner is a multinational organization that provides tax solutions and financial services. They operate in a fully remote environment with a collaborative culture and emphasize automation and AI-driven tools.