Privacy Counsel

About Index Exchange

Index Exchange is a globally trusted independent supply-side platform, powering intelligent decisioning that maximizes value for media owners. As a neutral, conflict-free exchange, we help media owners connect more effectively with the world’s leading brands, enabling marketers to achieve stronger performance while advancing efficiency, transparency, and quality across the programmatic ecosystem.

With more than 20 years of industry leadership, we continue to accelerate the ad technology evolution by applying intelligence closer to the impression and reducing waste across the supply chain. Through radically transparent practices and exceptional standards, we deliver long-term value for media owners, marketers, and partners worldwide.

What’s It Like to Work at Index?

Index is an exciting and fast-paced place to work. You'll be able to:

• Feed your ambition
• Lean into trust and transparency
• Feel genuine support from your colleagues

We pride ourselves on our core values and live them each day—they’re not just buzzwords. Our diverse and inclusive culture celebrates how unique differences drive us forward.

We have over 550 Indexers around the globe, dedicated to building a safe and transparent marketplace that ensures a trusted experience for consumers.

Are You Ready to Join the Programmatic Evolution?

What We’re Looking For

We’re seeking a passionate, curious, and self-motivated Privacy Counsel to join the Privacy Legal team. We need someone:

• Keen to enjoy the momentum of a fast-growing company
• Authentic: We want to know your values, approach, and motivations
• Solution-focused: Creative thinkers who tackle barriers with practical business sense
• Detail-oriented: Uncompromising legal standards with an exceptional work ethic

Apply if this resonates with you!

Here’s What You’ll Be Doing

Responsibilities include but are not limited to:

• Providing legal advice on global privacy, data protection, and information security laws (e.g., EU/UK GDPR, CCPA, PIPEDA, COPPA)
• Drafting and negotiating privacy and security terms in legal agreements (e.g., data processing agreements)
• Monitoring emerging privacy laws and advising on compliance
• Identifying legal/regulatory/compliance risks for new initiatives and providing mitigation strategies
• Supporting privacy compliance programs, including:
  • Impact assessments
  • Certifications and audits
  • Handling data subject requests
  • Policy development and training
• Engaging with government, industry groups, and consumer advocacy on privacy issues
• Partnering across departments (Product, Engineering, Information Security) to align privacy requirements with business objectives in new product launches or updates
• Assisting during incident response activities with the Information Security team
• Maintaining strong internal and external relationships within stakeholders
• Researching legal inquiries on compliance matters (e.g., EU/UK GDPR, US privacy laws)
• Addressing other reasonable duties as required