Privacy Counsel

About Index Exchange:

Index Exchange is a global advertising supply‑side platform enabling media owners to maximize the value of their content on any screen. As a trusted partner and ally, we connect leading experience makers with the world’s largest brands to ensure a quality experience for consumers.

We’re a proud industry pioneer with over 20 years of experience accelerating the ad technology evolution. With our radically transparent business practices and dedication to total market efficiency, we’re committed to upholding the integrity of the programmatic ecosystem at large.

Index is an exciting and fast‑paced place to work. You'll be able to feed your ambition, lean into trust and transparency, and feel genuine support from your colleagues. We’re built on our core values and live them each day. They’re not just buzzwords.

We pride ourselves on our independence and openness, not only in our technology, but in our teams, too. Our diverse and inclusive culture celebrates how we can leverage our unique differences to help drive Index forward.

We have more than 550 Indexers around the globe dedicated to building a safe and transparent marketplace that provides a trusted experience for consumers, and we’re looking for talented professionals to help take us to the next level.

We’re seeking a passionate, curious, and self‑motivated Privacy Counsel to join the Privacy Legal team. We want someone keen to enjoy the momentum that a fast‑moving company offers. More than anything, we need someone authentic. We want to know you, what you stand for, how you approach things, and why. If you think creatively, focusing on solutions instead of barriers, we’re a match.

If your business sense is practical, but your legal standards are uncompromising, we’re a match. If you have a great sense of humour and an exceptional work ethic, we’re a match. We look forward to hearing from you!

• Provide legal advice on global privacy, data protection, and information security laws and regulations
• Draft and negotiate privacy and security terms in legal agreements
• Monitor and advise on new and evolving privacy and data laws and regulations
• Support business units by identifying legal, regulatory and compliance requirements, mitigating risks, and conducting privacy reviews for new and amended initiatives
• Support Index’s privacy and information security compliance programs, including impact assessments, certifications, audits, regulatory compliance projects, data subject requests, training, and policy development
• Engage with government, industry, and consumer groups on privacy issues
• Partner with key departments (e.g. Product, Engineering, and Information Security) throughout the design, development, and launch of new products or changes to existing products to ensure privacy requirements align with business objectives
• Work with the Information Security team and other stakeholders to provide legal support during incident response activities
• Maintain strong relationships within the legal department, across all business units, and with external stakeholders
• Research and respond to inquiries related to compliance matters, including EU/UK GDPR, US privacy laws such as the CCPA, PIPEDA, and other privacy‑related matters

You may also be asked to undertake other reasonable duties as required.

• Possess 2‑4 years of legal experience in privacy and data protection in a private practice and/or in‑house environment (including experience with EU/UK GDPR, CCPA, PIPEDA, COPPA, etc.)
• Must be a member in good standing with an applicable bar (Canada, US, or UK) and be based in Canada or the UK. While remote work arrangements are available, preference will be given to candidates who can work in person at our Toronto, Canada or London, UK offices.
• Experience working on contracts and commercial transactions, especially negotiating data processing agreements
• Enjoy juggling multiple matters at once and prioritizing accordingly
• Have excellent written/verbal communication and advocacy skills
• Experience in the digital…