Sr. Counsel, Privacy Compliance Program Lead

GAQ327R249

Databricks is seeking a talented and experienced privacy attorney to lead our privacy compliance program and help the Databricks legal team provide cutting-edge, practical legal advice as we navigate rapidly evolving global laws and regulations in big data — including data privacy, data protection, and AI. This role reports to the Director & Assistant General Counsel, Privacy. As the day-to-day owner of the privacy compliance program, you will be responsible for developing AI solutions for operating and maturing the controls that keep Databricks compliant, and serve as a trusted advisor to business partners across the company.

You will be agile, highly organized, and have the skills, drive, and flexibility to build and scale a program at a leading technology company, addressing cutting-edge legal issues and organizational challenges. A successful candidate will be an AI proficient builder, resourceful self-starter, comfortable working in a fast-paced and dynamic environment, and excellent at building strong relationships and driving cross-functional execution.

The impact you will have

• Program Leadership: Own day-to-day operation of the Databricks privacy compliance program. Define priorities, establish and track program metrics and KPIs, and report on program health, risks, and maturity.

• Business and Legal Judgment: Exercise practical judgment about when to approve, approve with conditions, decline, or escalate.

• Privacy Program Compliance: Lead the further development, implementation, and continuous improvement of core program components — data subject rights requests, data inventory and data mapping (ROPA), records of processing, privacy by design, and the policies and processes that make the program run. Operate and improve the effectiveness of critical privacy compliance workflows.

• End-to-End Privacy by Design & Risk Assessments: Develop privacy review processes for the full data and product lifecycle — from ideation to end of life. Improve.

• Contract Negotiation and Transactions: Draft and update form agreements, and counsel on and negotiate data protection provisions in commercial contracts, including data processing addendums (DPAs), standard contractual clauses (SCCs), and related data-transfer instruments.

• Regulatory Analysis & Engagement: Monitor, research, and evaluate the applicability and impact of global privacy and AI laws, legislation, and regulatory guidance on new business initiatives. Support responses to regulator inquiries, audits, and enforcement developments.

• Policy Development: Develop, review, and maintain privacy policies, standards, notices, and procedures to align with legal requirements and best practices.

• Process Improvement: Contribute to developing and refining the processes that improve the privacy function, and partner with your stakeholders to build scalable process improvements as the business grows.

• Cross-Functional Collaboration & Legal Partnership: Build deep cross-functional relationships and collaborate with other legal leaders in commercial, go-to-market, compliance, corporate, and public affairs on privacy issues. Own the privacy training and awareness program, delivering strategic and timely enablement to keep the organization compliant.

• Incident Response: Advise on privacy and cybersecurity issues as a member of incident response teams, including breach assessment, notification analysis, and remediation, in partnership with the Legal Product team and Security.

• Team Contribution: Provide general legal support on a flexible, as-needed basis with respect to other areas of the business, and contribute as a team player to