Product & Privacy Counsel

Join Horizon3 as a Product & Privacy Counsel, where you will serve as a key legal partner across the organization. This role will focus on product counseling and privacy, with meaningful ownership in both areas. You will work closely with Product and Engineering throughout the product lifecycle, advising on new products, features, technologies, and regulatory requirements, while also helping to operate and scale Horizon3's global privacy program.

• Serve as a day-to-day legal partner to Product and Engineering on new products, features, integrations, and product changes, providing legal guidance throughout the product lifecycle.
• Advise on global privacy and data protection requirements, including GDPR, UK GDPR, CCPA/CPRA, U.S. state privacy laws, and other emerging privacy regulations, and help operate and scale Horizon3's global privacy program.
• Develop scalable playbooks, guidance, and processes that help teams identify and address legal requirements earlier in the product development lifecycle, and provide clear, practical advice that balances legal and regulatory requirements with product objectives.
• This role is ideal for an attorney who enjoys working directly with technical and business teams, can independently own matters, and is comfortable making practical, risk-based recommendations in a fast-moving cybersecurity environment
• Ability to understand technical products, data flows, software architecture, APIs, and cloud-based services sufficiently to identify and advise on legal and privacy risks
• CCPA/CPRA and U.S. state privacy laws
• Experience partnering directly with Product and Engineering teams
• Proven ability to independently manage multiple priorities in a fast-paced, high-growth environment
• Strong legal judgment and the ability to provide practical, risk-based recommendations
• 4+ years of relevant legal experience, with meaningful experience in both product/technology counseling and privacy or data protection
• GDPR and UK GDPR
• DPAs, SCCs, and cross-border data transfer mechanisms
• Strong drafting, written and verbal communication, and project-management skills
• Experience advising SaaS, cybersecurity, software, or other technology businesses
• Strong working knowledge of:
• Privacy-by-design principles and product privacy reviews
• J.D. from an accredited law school and active membership in good standing with at least one U.S. state bar
• We welcome candidates from all backgrounds and experiences, and we encourage all qualified individuals to apply
• Experience advising on AI, machine learning, or emerging technology regulation
• In-house experience at a SaaS, cybersecurity, AI, cloud, or other high-growth technology company
• Familiarity with the EU AI Act, EU Data Act, or cybersecurity regulatory frameworks
• Familiarity with SOC 2, ISO 27001, or similar security and compliance frameworks
• Experience supporting enterprise customer privacy and technology negotiations
• Experience conducting PIAs, DPIAs, TIAs, or similar privacy and data protection assessments
• CIPP/US, CIPP/E, CIPM, or similar privacy certification