Senior Director Privacy Counsel; AUS, NYC
Listed on 2026-02-16
-
IT/Tech
Data Security, Information Security
Bumble’s mission is to foster healthy and equitable relationships across the globe. As a platform built on trust and integrity, we’re deeply committed to protecting our members’ data and privacy. We are seeking a strategic and solutions-oriented Senior Director Privacy Counsel to help us build scalable, effective privacy programs that reflect our values and support our global growth.
Senior Director Privacy Counsel: You will own and implement global privacy and data protection compliance strategy and operating model across global jurisdictions, with a primary focus on data breach readiness and response, EU regulatory obligations, and U.S. privacy compliance. You will report into the Chief Legal Officer and partner closely with Legal, Info Sec (including the CISO), Engineering Leaders (including Chief Technology & Product Officer), Compliance, and cross‑functional teams to drive clarity, consistency, and accountability across all facets of data protection.
This role is ideal for a privacy attorney who thrives in a fast‑paced, tech‑focused environment and wants to make a meaningful impact through program design, incident management, and regulatory documentation.
- Define Bumble’s global privacy strategy, operating model, and multi‑year roadmap, navigating new uses of member data in AI models as well as the emerging regulatory schemes that will govern this work.
- Provide critical strategic legal guidance regarding privacy usage that drives both innovation and the Company’s commitment to privacy while building an efficient & scalable privacy compliance function – and partnering hands‑on with leaders across the organisation.
- Drive scalable, cross‑functional privacy compliance programs aligned with global frameworks including GDPR, UK DPA, CCPA/CPRA, and other U.S. state‑level privacy laws, creating a data governance framework and implementing a data governance structure. Provide regular privacy reporting and presentations to the Audit Committee and senior leadership, clearly communicating risk, readiness, trends, and decisions in a way that supports strong governance.
- Partner closely with an external Data Protection Officer (DPO) and internal senior leaders to navigate EU and UK obligations, US privacy frameworks, and evolving regulatory expectations, negotiating solutions that preserve relationships and outcomes.
- Lead Bumble’s privacy‑related cyber incident and data breach response program end‑to‑end in close partnership with Information Security—owning readiness and investigation/triage protocols related to privacy, making notification and regulatory reporting decisions across jurisdictions, coordinating regulator engagement, and driving post‑incident remediation and lessons learned—serving as the senior escalation point for high‑severity matters.
- Own and maintain core GDPR compliance documentation, including Records of Processing Activities (ROPA), Data Protection Impact Assessments (DPIAs), and Lawful Basis assessments, and draft and negotiate Data Processing Agreements.
- Partner closely with Info Sec, Product, and Engineering teams to ensure security safeguards, privacy‑by‑design, and clear roles and responsibilities in incident preparedness.
- Partner closely with the member support function to respond to requests from members for access to or deletion of their data, and assist on (i) regulatory investigations from regulators in the US, UK, and EU; and (ii) member claims in civil courts, in relation to Bumble’s response to members’ requests.
- Collaborate with internal Legal colleagues to ensure privacy compliance is integrated into wider compliance and regulatory strategies (e.g., marketing, consumer protection, international transfers), and advise other teams in the business on how to perform their functions in a manner that complies with data protection laws (e.g. marketing, advertising, communications and HR teams). Develop and lead a talented privacy advisor who plays a key role in ensuring the protection of our member’s data.
Build and deliver privacy policies, playbooks, templates, and training materials that promote awareness and enable operational consistency. - Stay abreast of…
(If this job is in fact in your jurisdiction, then you may be using a Proxy or VPN to access this site, and to progress further, you should change your connectivity to another mobile device or PC).