Job Information
CrowdStrike, Inc. Sr. Lead Counsel, Product Privacy (Remote) in Kirkland, Washington
CrowdStrike, Inc. Full time R18880 About the Role This is a newly created cross-functional position on our global privacy team. As a Senior Lead Product Privacy Counsel, you will work remotely, reporting into our Privacy & Public Policy team and partnering with CrowdStrike's Legal team in order to advise and guide our Engineering, Data Science, Information Security, Threat Intelligence teams, and other stakeholders to implement privacy-by-design principles into development of CrowdStrike's products and professional services. Your responsibilities include engaging directly with technical staff to provide practical legal advice to ensure compliance with relevant privacy laws and regulation. Moreover, you will serve as a subject matter expert, creating internal and customer-facing documentation, assisting with privacy and AI impact assessments and contributing to new legal terms. Strong legal and technical knowledge, as well as excellent communication and collaboration skills, are essential for this role. What You'll Do:
Provide practical legal advice on the engineering of CrowdStrike's offerings to ensure privacy considerations are integrated into the design and development of products and professional services from the outset.
Help build an effective privacy product review function in order to improve CrowdStrike's ability to identify and mitigate privacy risk throughout the product life cycle.
Collaborate with CrowdStrike's Legal team on privacy to prepare, review, and negotiate complex agreements including inbound and outbound licensing and OEM agreements, software licensing, software-as-a-service, co-marketing, strategic alliances, professional and hosted services, services contracts, privacy notices, and customer-facing documentation on an as needed basis as part of a team.
Conduct AI, privacy, data protection and transfer impact assessments. Develop and conduct privacy training for internal technical, legal and compliance stakeholders.
Monitor legal and regulatory changes that impact CrowdStrike's business and regularly update the data protection program based on emerging risks and best practices, implementing means to monitor compliance.
Serve as a knowledgeable internal data protection expert, with an expertise in GDPR, CCPA/CPRA, PIPEDA, EU AI Act, and other potentially applicable data protection and cybersecurity regulations.
Maintain detailed information repositories and help scale the Privacy team by developing innovative processes to support the fast-moving Engineering, Product/Design, Marketing and Sales teams.
Interact with customers to facilitate understanding of CrowdStrike's data protection compliance.
Brief senior attorneys and business leaders on issues to provide sound guidance to decision makers.
Advise on legal aspects of UX/UI design and language considerations.
Conduct due diligence on, and participate in integration of acquired technologies and products including privacy due diligence reviews in M&A.
Manage outsourced legal vendors on projects as needed.
What You'll Need:
J.D. and attorney licensed to practice in the US. Privacy certification (e.g., CIPP/E/US, CIPT)
7-10 years of data protection law and product development legal experience working at a law firm or as in-house counsel.
Strong technical background, especially with regard to cloud-based SaaS technologies, cybersecurity, artificial intelligence, machine learning, APIs, and general business operations.
Experience advising product and engineering teams from ideation to product launch, drafting customer-facing resources and completing privacy impact assessments.