Privacy & Cybersecurity Counsel

Snap•Santa Monica, CA

1d•Onsite

About The Position

Snap Inc is a technology company focused on improving communication through camera technology, with core products including Snapchat, Lens Studio, and Spectacles. The Legal Team serves as Snap's dedicated in-house law firm, thought partner, and advisor, assisting with privacy, product, IP, commercial transactions, corporate governance, employment, acquisitions, litigation, policy, and social impact. The company values belonging and strives for an innovative and inclusive leadership culture centered on its values of Kind, Smart, and Creative. This role is for a Legal Counsel to join a small, high-impact team responsible for managing Snap’s global privacy and cybersecurity programs. The position requires close collaboration with Product Counsel and other members of the Legal team, as well as with Policy, Security, Engineering, Product, and Design teams across the company, to support Snap’s strong privacy and cybersecurity practices, including its world-class privacy-by-design program. The ideal candidate should possess a deep understanding of both privacy and security law, strong technical curiosity, and the ability to partner effectively across legal, engineering, and product functions.

Requirements

Experience counseling and working closely with Security teams, including on-call rotation for security and privacy incident response, and security investigations
Deep understanding of, and experience advising on, global cybersecurity laws, regulations and frameworks (e.g., EU NIS 2, EU Cyber Resilience Act, Executive Order 14117, and the Cybersecurity Information Sharing Act, and NIST frameworks)
Deep understanding of, and experience advising on, domestic and global privacy laws, regulations, and frameworks, including the GDPR, ePrivacy Directive, Section 5 of the FTC Act, anti-spam laws, cookies regulation, and U.S. State privacy laws
Knowledge of existing and emerging artificial intelligence laws, regulations, and frameworks, and a passion for using AI responsibly to enhance legal work
In-house or law firm experience counseling clients on privacy, cybersecurity and general product, technology and mobile app-related matters
Excellent legal and business judgment and strategic thinking
Strong communicator, collaborator, and problem-solver who thrives in cross-functional settings
Detail-oriented, practical, business-minded, and a team player, with an ability to manage multiple priorities under tight deadlines
Strong work ethic, able to work independently and collaboratively, and a sense of humor
J.D. from a nationally recognized law school
Active membership in at least on state bar
6+ years of experience practicing law

Responsibilities

Partner closely with Snap’s Engineering Security team to provide legal and strategic advice on a range of matters, including vendor due diligence, third party privacy and security assessments, governance, risk and compliance, and privacy and security incident response
Collaborate with stakeholders to help develop, improve, and enforce Snap’s data security policies, standards, and practices, ensuring they meet global legal requirements
Ensure Snap’s data processing globally complies with all applicable privacy laws, including the EU General Data Protection Regulation (GDPR) and state and federal consumer protection and privacy laws
Partner with Product Counsel on complex issues that arise in the development of new products and technologies, including privacy, data security, and encryption
Work with Snap’s Privacy Engineering team to continually improve Snap’s privacy-by-design program
Analyze potential legal risks and regulatory requirements for new products and technologies
Conduct privacy due diligence reviews, privacy impact assessments, and integration plans for potential acquisitions and partnerships
Help draft public-facing descriptions of new products and technologies
Track and analyze proposed, pending, and new domestic and global privacy, data security, and consumer legislation that could impact the business and recommend necessary modifications to practices, as well as advise Snap’s Policy team on policy engagement priorities
Conduct periodic privacy and security trainings across the company