Senior Counsel, Privacy and Regulatory

Fastly•San Francisco, CA

5d•$211,370 - $253,644•Hybrid

About The Position

Fastly helps people stay better connected with the things they love. Fastly’s edge cloud platform enables customers to create great digital experiences quickly, securely, and reliably by processing, serving, and securing our customers’ applications as close to their end-users as possible — at the edge of the Internet. The platform is designed to take advantage of the modern internet, to be programmable, and to support agile software development. Fastly’s customers include many of the world’s prominent companies, including GitHub, Yelp, Paramount, and JetBlue. We're building a more trustworthy Internet. Come join us. We are looking for a Senior Privacy and Regulatory Counsel to join our Legal team. The person will lead our privacy program and provide legal guidance around artificial intelligence, data protection, and other emerging regulatory topics. This is a great opportunity for a thoughtful, pragmatic, and collaborative attorney with strong business instincts who wants to help shape innovative edge cloud technologies. We are seeking candidates who value working on a strong and diverse team and want to contribute to creating a welcoming, inclusive and supportive environment. This position reports to the Assistant General Counsel leading the Product, Technology, and Regulatory team, and will be based out of one of our offices with a preference for San Francisco, CA.

Requirements

JD from a respected institution and membership in good standing with at least one U.S. state bar
8+ years of relevant legal experience, with significant in-house experience advising on global privacy and regulatory matters at a technology company, especially in the cloud or SaaS space
Advanced knowledge of U.S. and global privacy and data protection laws and experience with emerging technology regulations, including AI regulatory schemes
Experience building and managing a privacy program and providing clear, actionable legal guidance to business, product, and engineering teams
Technology industry experience and familiarity with technical concepts such as APIs, encryption, LLMs, and cloud architecture
A pragmatic, solution-oriented approach to problem-solving
Excellent written and verbal communication skills and the ability to simplify complex legal issues for a business audience
Ability to own matters and prioritize, manage, and complete projects independently in a dynamic, evolving environment
A collaborative team player who enjoys working across disciplines and values building relationships and improving processes

Responsibilities

Architect, scale, and lead a global privacy program, managing stakeholder engagement across the company
Manage compliance strategy for emerging regulatory and technical issues related to cutting-edge products and new jurisdictions, including evolving cybersecurity, critical infrastructure, and AI regulations (e.g., NIS2, CRA, ISP-specific frameworks, global privacy laws)
Design and drive internal company policies, external assets, and sales collateral addressing global privacy, data protection, and other regulatory frameworks (e.g., GDPR, EU Data Act, EU AI Act)
Respond to regulatory inquiries and investigations, and collaborate with outside counsel where specialized jurisdictional expertise is required
Partner closely with product and engineering teams to provide end-to-end legal guidance on product and feature development, incorporating "privacy by design" and similar principles
Serve as our subject matter expert on privacy and other relevant regulations in complex customer, partner and vendor negotiations, including reviewing, drafting and negotiating agreements in collaboration with other Legal and business partners
Partner with our People team to advise on global employee data protection, workforce privacy initiatives, and talent-related privacy matters.
Independently manage the legal response to privacy-related incidents
Draft and maintain policies, playbooks, checklists, FAQs, and training materials to improve process and streamline stakeholder engagement on privacy and regulatory matters
Oversee and conduct Data Protection Impact Assessments (DPIAs), maintain Records of Processing Activities (RoPAs), and support audits, law enforcement requests, and platform-abuse process and policy