Associate General Counsel, Head of Privacy

We’re a high-tech home security company that’s passionate about protecting the life you’ve built and our mission of keeping Every Home Secure. And we’ve created a culture here that cares just as deeply about the career you’re building. Ours is a no ego culture of collaboration and innovation where those seeking their next challenge can find big opportunities and make a huge impact on the lives of all those who we protect. We don’t just want you to work here. We want you to grow and thrive here.

We’re embracing a hybrid work model that enables our teams to split their time between office and home. Hybrid for us means we expect our teams to come together in our state-of-the-art office on two core days, typically Tuesday, Wednesday, or Thursday – working together in person and choosing where they work for the remainder of the week. We all benefit from flexibility and get to use the best of both worlds to get our work done.

Well, we’re growing and thriving. So, we need smart, talented, and humble people who share our values to join us as we disrupt the home security space and relentlessly pursue our mission of keeping Every Home Secure. 

SimpliSafe is looking for a passionate, experienced privacy and information security attorney to lead our global privacy function. This role will serve as a strategic partner to the Information Security, AI Governance, Go-To-Market, Product and Engineering teams. As the company's internal privacy leader, the Head of Privacy will advise cross-functionally on data privacy, data governance, and information security — and help shape the company's future growth. This role also entails an exciting opportunity to support SimpliSafe’s investment in AI through internal adoption and implementation of corporate-wide governance.

• →Serve as the company's internal privacy expert, providing strategic and practical counsel to teams across legal, engineering, product, marketing, security, HR, and strategic partnerships.
• →Lead and own the company's global data privacy compliance program end-to-end.
• →Serve as the company's designated Data Privacy Officer (DPO), acting as the primary point of contact for regulators, supervisory authorities, and data subjects, and advising senior leadership on privacy risk.
• →Act as the escalation point for negotiating, drafting, and reviewing contracts involving personal data — including vendor agreements, DPAs, data transfer agreements, and customer-facing terms.
• →Build and maintain privacy policies, data inventories, records of processing activities, and supporting documentation and improve process automation, templates and playbooks.
• →Guide the company's response to privacy inquiries and data subject rights requests in a timely and compliant manner.
• →Conduct Privacy Impact Assessments (PIAs/DPIAs) and guide the company through information security assessments (PCI / CCPA) to identify and mitigate risks from current and planned data processing activities.
• →Support regular audits and monitoring to ensure compliance with applicable privacy requirements globally.
• →Develop and deliver privacy training and awareness programs across the organization.
• →Maintain deep expertise in relevant global privacy law, including GDPR/UK GDPR, PECR/ePrivacy Directive, CCPA/CPRA and existing and emerging U.S. state laws, BIPA/CUBI, and privacy considerations in AI and IoT.
• →Partner with the AI Governance team to assess and mitigate privacy risk in AI-enabled product features and internal AI use cases, including within the Legal team.
• →Collaborate cross-functionally on incident response planning and execution and lead the legal analysis of regulatory and individual notification obligations arising from privacy and security incidents.
• →Partner with IT to develop and maintain a comprehensive document retention policy.

• 7+ years of relevant legal experience, with at least 5 years focused on data privacy and protection; in-house experience strongly preferred.
• Active bar admission (U.S. state) with ability to register as in-house counsel.
• Deep working knowledge of U.S. federal and state privacy and AI laws, GDPR/UK GDPR, and related regulatory frameworks.
• A track record of navigating complex regulatory landscapes, establishing governance frameworks and managing cross functional projects to successful completion.
• A strong business acumen and ability to partner well cross functionally and within the legal team.
• An ability to assess business risk and advise senior leaders in a strategic and business savvy manner is a must.
• Strong contract negotiation skills and experience partnering directly with internal business clients.
• Experience counseling on products and businesses that depend on the collection, storage, and processing of personal data.
• Practical, commercial-minded approach to legal risk — you identify solutions, not only problems.
• CIPP certification(s) preferred.
• Experience with IoT, connected home products, or AI-related privacy matters is a plus.
• Background supporting high-growth technology companies, including those expanding internationally.

SimpliSafe's Legal Team serves as a trusted, empowered business partner across all functions - solving complex problems, guiding strategy, and protecting the interests of our company, customers, and employees. We build strong relationships with our business partners, embrace a practical and solutions-oriented approach, and deliver timely, risk-adjusted advice. We support each other's growth and bring a healthy sense of humor to the work.

• Customer Obsessed - Building deep empathy for our customers, putting them at the core of our work, and developing strong, long-term relationships with them.
• Aim High - Always challenging ourselves and others to raise the bar.
• No Ego - Maintaining a “no job too small” attitude, and an open, inclusive and humble style.
• One Team - Taking a highly collaborative approach to achieving success.
• Lift As We Climb - Investing in developing others and helping others around us succeed.
• Lean & Nimble - Working with agility and efficiency to experiment in an often ambiguous environment.