Privacy & Product Counsel

About the role

Hilbert is seeking a Privacy & Product Counsel to design and operate its privacy program from the ground up. This senior legal professional will embed privacy considerations directly into product development and work closely with engineering, product, and go‑to‑market teams.

Key responsibilities

• Design, build, and manage Hilbert’s end‑to‑end privacy program, including policies, data mapping, retention, and vendor/sub‑processor oversight for US and UK/EU operations.
• Provide privacy‑by‑design guidance to product and engineering on data access, retention, inference, and AI agent workflows.
• Maintain compliance with CCPA/CPRA, state privacy laws, UK GDPR/DPA 2018, EU GDPR, and monitor emerging AI‑specific regulations.
• Draft and negotiate data processing agreements, international transfer mechanisms (SCCs, UK IDTA), and scalable sub‑processor frameworks.
• Review and negotiate enterprise contracts, DPAs, and security addenda for US and UK/EU customers, supporting sales while protecting data commitments.
• Advise on product disclosures, human‑in‑the‑loop requirements, and collaborate with security on incident response and breach notifications.

Required profile

• Legal professional with deep expertise in US, UK, and EU privacy law.
• Experience building privacy programs for technology or AI‑focused companies.
• Ability to operate in a fast‑moving, high‑autonomy startup environment.
• Strong communication skills to interact with product, engineering, sales, and customer legal teams.

Required skills

• Knowledge of CCPA/CPRA, state privacy statutes, UK GDPR/DPA 2018, EU GDPR.
• Familiarity with data processing agreements, SCCs, UK IDTA, and sub‑processor frameworks.
• Experience negotiating enterprise contracts and security addenda.