Senior Privacy Counsel
Listed on 2026-08-17
-
Law/Legal
Commercial & Corporate Law, Intellectual Property, Regulatory Compliance Specialist, Financial Law
About us
At Sierra, we’re building a platform to enable every company in the world to build better, more human customer experiences with AI. We partner with industry leaders such Soft Bank, Uber, Rivian, CLEAR, and Sutter Health. We are primarily an in-person company based in San Francisco, with growing offices across North America, Europe, and Asia.
We are guided by a set of values that are at the core of our actions and define our culture:
Trust, Customer Obsession, Craftsmanship, Intensity, and Family. These values are the foundation of our work, and we are committed to upholding them in everything we do.
Our co-founders are Bret Taylor and Clay Bavor. Bret currently serves as Board Chair of OpenAI. Previously, he was co-CEO of Salesforce (which had acquired the company he founded, Quip) and CTO of Facebook. Bret was also one of Google's earliest product managers and co-creator of Google Maps. Before founding Sierra, Clay spent 18 years at Google, where he most recently led Google Labs.
Earlier, he started and led Google’s AR/VR effort, Project Starline, and Google Lens. Before that, Clay led the product and design teams for Google Workspace.
We're hiring a Senior Privacy Counsel to be a core member of Sierra's growing legal team. This role will report to our Associate General Counsel, Product and Privacy, as part of our growing privacy legal function. We are looking for someone who has deep expertise in privacy counseling, AI privacy regulation, and commercial privacy support (e.g., DPAs, BAAs, and MSA privacy provisions).
You will thrive in dynamic environments, enjoy tackling challenges beyond your comfort zone, and be excited to contribute across the business. In return, we'll provide the support and opportunities you need to grow and excel as a lawyer. You'll be part of a legal team that is highly respected within the company — committed to excellence, collaboration, and making a meaningful impact.
Advise product, engineering, operations, marketing and other cross-functional teams on compliance with global privacy laws and related regulation applicable to Sierra’s business, including GDPR, the EU AI Act, DORA, etc.
Build and own Sierra’s privacy counseling and compliance program as we scale globally.
Develop specific privacy regulation expertise in core regulated industries of Sierra customers, such as healthcare, insurance, banking, telecommunications, and financial services.
Support the commercial legal team and GTM teams by drafting, reviewing, and negotiating the commercial privacy aspects of transactional work, including data processing agreements, business associate agreements, and other privacy-related transactional documents.
Manage privacy incident response processes and related notification obligations.
Develop training materials and conduct training sessions for product and business teams.
Advise on all aspects of emerging AI-specific privacy regulations and their applicability to Sierra’s business.
Develop and implement AI governance policies and frameworks to ensure responsible AI deployment, ethical data usage, and regulatory adherence.
Monitor and interpret global AI and privacy regulations, advising leadership on risks, trends, and strategic compliance initiatives.
Represent Sierra in discussions with regulators, industry groups, and external stakeholders on privacy and AI governance matters.
8+ years of legal experience, with a combination of large international law firm and in-house experience at a tech company.
Deep knowledge of global privacy laws (e.g., GDPR, CCPA, and other US state privacy laws) and AI regulatory frameworks (e.g., EU AI Act, NIST AI Risk Management Framework).
A passion for AI, with a deep understanding of AI products, LLMs and the related legal issues, and personal experience with integrating AI into your work.
Experience mentoring and managing more junior team members.
Extensive experience drafting, reviewing, and negotiating DPAs, BAAs, and other privacy-related commercial terms.
Ability to assess privacy risks and implement compliance solutions in the context of a hyperscaling business, with…
(If this job is in fact in your jurisdiction, then you may be using a Proxy or VPN to access this site, and to progress further, you should change your connectivity to another mobile device or PC).