Jobgether
Head of Legal & Compliance
Get notified of more jobs like this · No spam, ever
How your CV stacks up
Upload your CV to see how well it fits this job role
?%
Head of Legal & Compliance
This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Head of Legal & Compliance based in United Kingdom.
This is a senior, hands-on legal and compliance leadership role within a fast-growing AI-powered B2B technology environment.
You will own the legal framework surrounding data, AI-powered calling, privacy, telemarketing compliance, and enterprise customer requirements.
The role is designed to be built from the ground up, giving you significant ownership over processes, policies, and risk frameworks.
You will work directly with Product and Engineering, helping shape features and technical decisions rather than reviewing them only after development.
You will also lead commercial negotiations and enterprise legal and security reviews, helping remove friction from strategic deals.
The position requires strong judgment, commercial awareness, and the ability to translate complex regulations into practical product requirements.
It is an opportunity to establish a scalable legal and compliance function while becoming a trusted advisor across the business.
Accountabilities
- Own the legal and compliance framework for AI-powered calling and dialer functionality, including TCPA requirements, consent, do-not-call obligations, call recording, and disclosures relating to AI-generated voice.
- Partner closely with Product and Engineering to ensure compliance requirements are implemented directly within platform workflows, controls, and technical processes.
- Manage external specialist legal advisors, including a TCPA-focused firm, and determine which matters should be escalated externally versus handled internally.
- Lead the privacy program across applicable regulations, including GDPR, CCPA/CPRA, and emerging US state privacy requirements.
- Manage data-subject requests, opt-outs, data broker registration requirements, and other operational privacy processes.
- Own data sourcing and governance practices, including supplier diligence, lawful-basis assessments, legitimate interest assessments, DPIAs, and transfer impact assessments.
- Serve as the designated DPO and establish an effective approach to AI governance as new AI and agentic capabilities are introduced.
- Draft, review, and negotiate customer and vendor agreements, data processing agreements, and other commercial legal documentation.
- Lead enterprise security and privacy reviews, working to remove legal and compliance barriers that could delay or prevent strategic customer opportunities.
- Serve as a key legal contact for enterprise customers and their counsel, building confidence and helping facilitate successful commercial relationships.
- Participate directly in product and roadmap planning, identifying regulatory considerations early enough to influence product design and development.
- Translate regulatory requirements into clear, practical product and engineering requirements that teams can implement effectively.
- Assess emerging regulatory developments, distinguish material risks from overly cautious interpretations, and help the business move quickly while maintaining appropriate compliance standards.
- Build and scale legal and compliance processes from the ground up, establishing only the frameworks, controls, and documentation that create meaningful business value.
Reasons to use Rodeo
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
It searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
Requirements
- 8+ years of combined law firm and in-house legal experience, with qualification to practice law in the United States.
- Deep, practical privacy experience, particularly with GDPR and CCPA/CPRA, including applying these frameworks to real products, data flows, and business operations.
- Strong experience advising Product and Engineering teams and participating directly in technical and product decision-making.
- Proven ability to establish or significantly develop a legal and compliance function in an early-stage or high-growth environment.
- Strong understanding of data privacy, data sourcing, AI governance, and regulatory risk management.
- Experience with TCPA, telephony, dialer, calling, consent, or related communications regulations is highly desirable.
- Strong commercial legal experience, including customer and vendor contracts, DPAs, enterprise negotiations, and privacy or security reviews.
- Ability to communicate complex legal and regulatory requirements clearly to technical, commercial, and non-legal stakeholders.
- Strong judgment and the ability to balance regulatory obligations with commercial priorities, product velocity, and business objectives.
- Comfortable operating independently and switching between strategic leadership and detailed hands-on execution.
- Experience working in sales technology, B2B data, privacy technology, SaaS, or another technology-driven environment is advantageous.
- Certifications such as CIPP/E, CIPP/US, CIPM, or AIGP are welcome but not required.
- Academic or professional exposure to Business Analytics is a plus.
- Fluent English communication skills, both written and spoken.
Get help with your application
Your very own career expert that helps elevate your application to the next level.
Benefits
- Competitive salary.
- Health insurance.
- Stock options.
- A supportive and collaborative working environment.
- Significant ownership and autonomy in a high-impact leadership role.
- Opportunity to build a legal and compliance function from the ground up.
- Direct collaboration with Product, Engineering, commercial teams, and senior leadership.
- Exposure to emerging AI, data privacy, telephony, and regulatory challenges.
- Career growth opportunities within a fast-growing technology environment.
- Annual company offsite at a different destination.
- Opportunity to influence products and processes at an important stage of organizational growth.
- Inclusive culture that values diverse backgrounds, perspectives, skills, and experiences.
How Jobgether Works
We use an AI-powered matching process to ensure your application is reviewed quickly, objectively, and fairly against the role's core requirements. Our system identifies the top-fitting candidates, and this shortlist is then shared directly with the hiring company. The final decision and next steps (interviews, assessments) are managed by their internal team.
We appreciate your interest and wish you the best!
Why Apply Through Jobgether?
Data Privacy Notice: By submitting your application, you acknowledge that Jobgether will process your personal data to evaluate your candidacy and share relevant information with the hiring employer. This processing is based on legitimate interest and pre-contractual measures under applicable data protection laws (including GDPR). You may exercise your rights (access, rectification, erasure, objection) at any time.
We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses and identifying potential inconsistencies or verification signals in application materials based on available information. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London
Skills
Location