Senior Counsel, Privacy & AI Governance

Treasure AI: Treasure AI is the agentic experience platform built to acquire, retain, and grow your most valuable customers. Powered by AI, Treasure AI is shaped by human creativity and always-on through continuous, context-driven action. Furthermore, Treasure AI employees are enthusiastic, data-driven, and customer-obsessed. We are a team of drivers—self-starters who take initiative, anticipate needs, and proactively jump in to solve problems. Our actions reflect our values of honesty, reliability, openness, and humility. Your Role:

The Senior Counsel, Privacy & AI Governance will support the day-to-day management and continuous improvement of Treasure AI’s global privacy program and contribute to the development and operationalization of its AI governance program. This is an AI-forward role: the Senior Counsel is expected to actively use, evaluate, and champion AI tools and emerging technologies to automate, accelerate, and improve the quality of the company’s privacy and data protection processes — from assessments and contract review to incident response and regulatory monitoring — and to help ensure compliance with applicable global privacy, data protection, and related AI regulatory requirements. The role will report to the Global Head of Privacy (based in the UK).

Responsibilities: Support the day-to-day operation and continuous improvement of Treasure AI’s global privacy program, including the implementation of privacy policies, standards, and controls across functions. Lead and coordinate privacy assessments, including DPIAs, PIAs, LIAs, transfer assessments, and other reviews, as appropriate. Maintain and help enhance Records of Processing Activities (RoPA) and other privacy compliance documentation. Support the implementation and ongoing development of privacy governance, data governance, and AI governance frameworks and controls.Provide practical, risk-based advice on compliance with applicable privacy and data protection laws and regulations, including UK GDPR, EU GDPR, CCPA/CPRA, and other relevant regional requirements. Draft, review, and negotiate data processing agreements (DPAs) and privacy-related provisions in commercial contracts. Oversee or support the intake, assessment, and response to data subject rights requests in accordance with applicable legal requirements and internal procedures. Coordinate with Legal, IT, Security, and relevant business stakeholders on the investigation, documentation, escalation, and remediation of privacy incidents and breaches. Help design, improve, and where appropriate lead initiatives to automate and scale privacy and AI governance policies, procedures and related workflows. Develop and deliver privacy training and awareness materials for internal stakeholders; support initiatives to foster AI literacy and promote a culture of privacy, accountability, and responsible data use across the organization. Job Requirements: Qualified lawyer in at least one relevant jurisdiction. Typically at least 4 years of relevant experience in privacy, data protection, compliance, or risk management roles. Strong practical knowledge of GDPR and experience supporting privacy compliance in a multi-jurisdictional environment. Experience conducting privacy assessments. Experience drafting and negotiating DPAs and privacy-related contractual provisions. Demonstrated familiarity with use of AI tools in day-to-day privacy work, and a track record for identifying and operationalizing automation opportunities. Experience working with legal operations, engineering, or product teams to design and deploy automated workflows is a strong plus. Familiarity with privacy management platforms, operational privacy processes, and AI-enabled legal/privacy tooling; experience with OneTrust or similar tools is an advantage. In-house experience at a technology company is preferred. Privacy certification such as CIPP/E, CIPM, or similar is desirable but not required. Physical Requirements: Working out of the London, UK office according to our “Global Hybrid Working Policy.” Travel Requirements: You may be asked to travel outside of the UK no more than two or three times per year.