Sr. Privacy Counsel

About the position HighLevel builds products that serve over 60,000 businesses worldwide, and our product teams ship fast. We need a Sr. Privacy Counsel, Product who can keep pace: someone who lives in the product development process, spots privacy issues early, and delivers practical, risk-calibrated guidance that helps the business move forward. This is a product-facing role. You'll be embedded with engineering and product teams, advising on privacy-by-design from the earliest stages of feature development through launch. You'll own privacy counseling for HighLevel's platform, working through questions that range from consent flows and data collection practices to international data transfers and AI-driven features. The right candidate understands that good privacy advice isn't just about identifying risks. It's about helping the business understand those risks, weigh them against business objectives, and make informed decisions. You should be thorough in your analysis, clear in your communication, and business-minded in your approach. You'll report to the Managing Counsel, Product & Compliance and work closely with the Privacy Program Manager and the broader legal team. This role demands significant autonomy. You need to operate independently, build trust with product and engineering stakeholders, and deliver advice that's both legally sound and practically useful.

Responsibilities

• Serve as HighLevel's primary privacy advisor for product development, embedded in the full lifecycle from concept through release
• Review new features, product changes, and data practices for privacy implications, providing actionable guidance that enables informed decision-making
• Advise on consent mechanisms, data collection disclosures, cookie and tracking implementations, and user-facing privacy controls
• Partner with product and engineering to design privacy-compliant solutions for AI-powered features, analytics, and data-driven functionality
• Conduct privacy reviews for new integrations, partnerships, and third-party data sharing arrangements
• Provide day-to-day counseling on GDPR, CCPA/CPRA, and other US state privacy laws as they apply to HighLevel's products and operations
• Monitor and advise on emerging privacy regulations globally, translating new requirements into practical product guidance
• Advise on TCPA, CAN-SPAM, and other marketing compliance issues as they intersect with product functionality
• Support HIPAA compliance efforts where HighLevel acts as a business associate
• Coordinate closely with other legal subject matter experts across the team to deliver cohesive, actionable guidance to product managers, developers, and engineers, ensuring product teams receive consistent counsel
• Build strong working relationships with product managers, engineers, and designers, earning trust as a partner who helps them ship better products
• Translate legal requirements into language product teams can act on, and translate product plans into legal risk assessments leadership can understand
• Work closely with the Privacy Program Manager on operationalizing privacy requirements and implementing privacy-by-design frameworks
• Partner with commercial counsel on customer-facing privacy commitments and DPA negotiations
• Continuously improve the privacy review process, identifying opportunities for greater efficiency, better product team engagement, and earlier issue identification
• Build and maintain systems for tracking privacy review requests, moving beyond ad hoc Slack communications to ensure nothing falls through the cracks
• Work closely with the Privacy Program Manager and product leadership to improve cross-functional communication and coordination on privacy matters
• Develop scalable intake processes, templates, and guidance documents that enable product teams to self-serve on routine privacy questions
• Identify opportunities for automation in the privacy review workflow, reducing manual effort while maintaining quality
• Serve as the escalation point for privacy-related customer inquiries, working with customer-facing teams to resolve complex privacy questions
• Communicate directly with customers on sensitive privacy matters, balancing legal accuracy with clear, professional messaging
• Partner with customer success and support teams to develop guidance for handling routine privacy inquiries at the front line

Requirements

• JD from an accredited law school and active bar admission in at least one US state
• CIPP/E or CIPP/US certification
• 8 years of experience practicing privacy law, with meaningful exposure to product counseling in a technology or SaaS environment
• Experience advising on AI/ML features, automated decision-making, or data analytics products
• Strong command of GDPR, CCPA/CPRA, and other major US state privacy laws, with the ability to apply them to complex product questions without significant supervision
• Demonstrated ability to provide thorough, risk-calibrated advice that informs business decisions
• Track record of building productive relationships with non-legal stakeholders, particularly product and engineering teams
• Ability to communicate effectively with customers on privacy matters, with a professional, clear, and customer-oriented approach
• Proficiency in using AI-powered tools with demonstrated ability to leverage these tools to deliver faster, more efficient guidance without sacrificing quality or accuracy.
• Ability to work independently, make judgment calls with incomplete information, and operate without constant oversight
• Strong written and verbal communication skills, with the ability to explain complex privacy concepts to non-lawyers

Nice-to-haves

• In-house experience at a SaaS, marketing technology, or B2B platform company
• Experience supporting IPO readiness or operating in a public company environment.
• Familiarity with TCPA, CAN-SPAM, and marketing compliance
• Experience building or improving privacy review processes and workflows
• Exposure to HIPAA compliance in a technology context

Apply tot his job Apply To this Job