Director of Legal & Privacy

Sovrn•Boulder, CO

10h•$165,000 - $200,000•Hybrid

About The Position

The Director of Legal & Privacy will lead Sovrn's legal function, including commercial contracting, privacy and data protection, intellectual property, dispute management, corporate governance support, and legal operations infrastructure. The role operates in an environment where AI tooling is central to how legal work gets done and where AI governance is increasingly central to what the legal function delivers to the business. The Director reports to the Chief Financial Officer and partners with the CFO on legal strategy, resourcing, and risk. The role works cross-functionally with sales, product, engineering, and finance, oversees Sovrn's outside privacy contractor, and manages relationships with external counsel.

Requirements

10+ years of legal experience supporting technology companies, including substantive experience in adtech, martech, or digital media.
5+ years of in-house experience.
5+ years of commercial contract negotiation experience, including complex master agreements.
Demonstrated knowledge of adtech privacy regulation, including GDPR, CCPA/CPRA, U.S. state privacy laws, and IAB frameworks.
Working knowledge of AI governance frameworks (NIST AI RMF or ISO/IEC 42001) and emerging AI regulation, including the Colorado AI Act and EU AI Act.
Experience drafting and negotiating AI-related contract terms, including provisions on training data, model licensing, output ownership, and AI-specific representations and indemnities.
Hands-on experience using AI-enabled legal tools (e.g., AI-assisted contract review and drafting, AI-augmented contract lifecycle management, AI-powered legal research) and a track record of integrating them into legal workflows.
Experience managing outside counsel and external legal or privacy contractors.
Experience designing and implementing legal operations processes and tooling.
Strong written and verbal communication skills, with the ability to advise senior executives and translate legal risk into business terms.
Sound judgment and the ability to make decisions with incomplete information.
Ability to manage multiple priorities and deadlines in a fast-paced environment with composure and consistency.

Nice To Haves

J.D. from an accredited law school with active bar membership in good standing preferred.
CIPP/E or CIPP/US certification preferred.
AIGP (Artificial Intelligence Governance Professional) certification or equivalent preferred.

Responsibilities

Draft, review, negotiate, and manage commercial agreements, including publisher, advertiser, vendor, partner, and platform contracts.
Support sales and business development on a high-volume basis, balancing transaction speed with appropriate risk management.
Develop and maintain contract templates, negotiation playbooks, and approval workflows.
Advise internal stakeholders on contract terms, obligations, and business implications.
Oversee the company's privacy program, including direct management of the outside privacy contractor's scope, deliverables, and work product.
Maintain compliance with applicable privacy laws and frameworks, including GDPR, CCPA/CPRA, other U.S. state privacy laws, and adtech industry frameworks (IAB TCF, GPP, and related standards). Collaborate with Product leaders on new requirements to ensure compliance.
Advise on data processing agreements, vendor diligence, sub-processor management, consent mechanisms, and transparency obligations.
Implement and manage core legal infrastructure, including contract lifecycle management, document management, intake and triage, and reporting.
Manage outside counsel engagements, scope, and spend.
Own the procurement process for new and renewing spend.
Manage the company's IP portfolio, including trademarks, patents, and trade secrets, in coordination with outside counsel.
Support disputes, demand letters, pre-litigation matters, and handle insurance and litigation processes.
Assist with corporate transactions, board materials, and governance documentation.
Advise executives and functional leaders on legal, regulatory, and risk matters.
Train the broader organization on legal processes, contract procedures, and privacy obligations.