Legal Counsel - Privacy

TRM Labs

2d • Remote

About The Position

Legal Counsel, Privacy will own how TRM keeps Orion compliant with privacy and data-protection laws around the world, partnering directly with Product, Engineering, and GTM so the company can expand into new markets without slowing down. This is a build role: you will stand up the privacy program that lets a public-sector platform operate globally, and your judgment will directly shape what TRM can ship and where it can operate.

Requirements

• 4+ years of privacy and data-protection legal experience, with hands-on work applying GDPR and US state privacy laws to a technology product.
• Active US bar admission; JD from an ABA-accredited law school.
• Proven AI fluency: you use Claude, Gemini, or equivalent tools in your daily workflow and can design AI-assisted privacy processes — not just use AI for one-off research.
• Experience counseling Product and Engineering teams on privacy-by-design, DPIAs, and data flows.
• Familiarity with cross-border transfer mechanisms (SCCs, transfer impact assessments, adequacy analysis).
• A collaborative, business-minded approach: you explain privacy risk in plain terms and work with partners to find a path forward rather than defaulting to no.
• Comfort operating with ownership and limited oversight in a fast-moving environment.

Responsibilities

• Determine whether TRM can launch Orion in a new jurisdiction by owning the privacy analysis end-to-end — using AI to draft DPIAs and transfer assessments so decisions land in days, not weeks.
• Embed privacy-by-design into Orion's development lifecycle, partnering with Engineering to resolve data-flow and retention questions before they become launch blockers.
• Lead and respond to data subject rights requests (DSARs) in coordination with Engineering and Customer Success.
• Build and maintain the privacy program's core artifacts — records of processing, DPIA templates, and breach-response playbooks — using AI-assisted workflows so the program scales without adding headcount.
• Run first-pass review of data processing agreements with AI, then finalize positions, cutting turnaround time on customer and vendor DPAs.
• Design lawful cross-border data transfer mechanisms (SCCs, transfer impact assessments) that let Orion serve international customers with confidence.
• Stand up a self-service privacy-review intake, supported by AI triage, so routine questions are answered quickly and only genuinely novel risk reaches deep legal review.
• Support the CLO and AGC with clear, business-ready guidance that helps leadership make faster, better-informed decisions on privacy risk.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior