At Cloudflare, we are on a mission to help build a better Internet. Today the company runs one of the world’s largest networks that powers millions of websites and other Internet properties for customers ranging from individual bloggers to SMBs to Fortune 500 companies.
We are looking for an experienced counsel to help Cloudflare navigate the complicated challenges of processing personal data amid an ever-changing and diverse regulatory landscape. Specifically, you will oversee the functions of Cloudflare’s Office of the Data Protection Officer to manage the company’s existing privacy program and ensure the company continues to comply with all applicable data protection and privacy laws, including the EU General Data Protection Regulation (“GDPR”).
Responsibilities:
- Be the subject matter expert on existing and emerging AI and data protection regulations or guidance in the EMEA region, with a focus on the jurisdictions where Cloudflare has offices (multiple locations in the EU, UK, Switzerland, and UAE).
- Understand and advise on the requirements related to cross-border data transfers globally.
- Collaborate with and advise product lawyers on Cloudflare’s privacy by design policies.
- Advise the Data and Privacy Operations team on handling data subject requests, records of processing activities, privacy and AI impact assessments, and more.
- Advise the Data and Privacy Operations team on conducting and approving privacy and AI vendor reviews.
- Support the commercial transactions legal team in negotiating data processing addendums and similar contractual language under global privacy laws.
- Support the corporate legal team on data and privacy-related due diligence for M&A transactions as well as supporting post-acquisition integration tasks related to privacy and AI compliance.
- Advise on data protection implications of and legal requirements applicable to security and privacy incidents, exercising judgment and discretion while advising cross-functional teams on incident handling procedures and communications.
- Create and contribute to playbooks and FAQ libraries for various teams to ensure they have the most current guidance related to privacy, data governance, and responsible AI.
Desirable Skills, Knowledge, and Experience:
- LLB/JD equivalent degree with strong academic credentials and admitted to practice law in one of the jurisdictions where Cloudflare has an office and/or be a U.S. or UK-qualified lawyer
- 10+ years of relevant legal experience counseling a global company on international privacy and data protection issues, preferably with time in-house at a technology company with established privacy compliance protocols as well as at a top regional or global law firm
- Expert knowledge of EMEA-region AI, privacy, and data protection laws, regulations and compliance regimes at all levels, including familiarity with industry-specific regimes
- Solution-oriented business and legal counselor with a growth mindset and strong sense of humor
- Strong communication skills and cooperative team player. Lead with empathy and understanding while embracing diverse points of view. Flexibility to adapt and thrive in a fast paced environment.
- Demonstrated ability and strong desire to effectively advise, develop relationships, and work collaboratively with stakeholders across teams to establish effective solutions efficiently and in an amenable manner
- Experience prioritizing work and providing advice under deadlines
- Ability to draft documents, policies, messages and anything else in a precise manner, while still being concise and digestible for non-lawyers
- A willingness to work flexibly on occasion to accommodate working with a globally distributed team
- Technical background / expertise is highly desired – while a science or technical degree is not a prerequisite for this job, a passion for technologies is
