Privacy Legal Analyst

Superhuman Superhuman · Consumer · Hub - San Francisco · G&A

This role is for a Privacy Legal Analyst at Superhuman, focusing on privacy and data protection projects. The analyst will manage vendor privacy reviews, handle privacy legal tickets, maintain accountability documentation, and develop best practices for the privacy legal team. The role involves cross-functional collaboration with Engineering, Product, Marketing, Compliance, Trust, and Communications teams.

What you'd actually do

  1. Manage Superhuman’s vendor privacy review process, including running diligence on vendors’ privacy practices and reviewing Data Processing Agreements
  2. Own/drive review of Privacy Legal tickets (including partnering within and outside of legal to drive legal and technical privacy recommendations)
  3. Maintain privacy accountability documentation (such as privacy impact assessments and data protection impact assessments)
  4. Draft and update playbooks and self-serve resources to educate and empower our partner teams
  5. Partner with our GRC team and support privacy controls management processes and audits (as needed)

Skills

Required

  • 4+ years of experience in a privacy role
  • Proficiency in privacy and data protection laws, frameworks, and standards
  • Ability to translate complex issues into actionable legal guidance
  • Experience with B2B and B2C SaaS
  • Ability to manage multiple projects, stakeholders, priorities, and deadlines
  • Demonstrated ability to work independently and to proactively manage tasks and priorities across multiple projects and stakeholders
  • Clear and empathetic communication (verbal and written)

Nice to have

  • CIPP/E, CIPP/US, CIPT, or similar certification
  • Passion for privacy and data protection and how it intersects with technology, law, and business
  • Thrives in fast-paced, results-driven environments
  • History of developing a culture of getting to "yes, if…"
  • Team player who leads with humility and a healthy sense of humor

What the JD emphasized

  • privacy and data protection projects
  • novel legal and technical issues related to privacy and data protection
  • privacy compliance posture
  • privacy and data protection projects at the intersection of law, business, and technology
  • privacy role
  • legal and technical privacy issues
  • privacy and data protection laws, frameworks, and standards
  • privacy and data protection