Product, Privacy & Compliance Counsel

Join ShopMy - Powering the Future of Digital Marketing

About the Role

We're looking for a Product & Privacy Counsel to join our growing Legal team. In this role, you'll serve as a strategic partner particularly to our Product, Engineering, Data, and Strategy & Operations teams — providing day-to-day legal guidance across the full product development lifecycle. You'll advise on privacy, data governance, AI, regulatory compliance, and product marketing as ShopMy scales globally. The ideal candidate brings deep experience in product counseling and privacy law, thrives in fast-paced environments, and is excited to help build the frameworks and policies that allow ShopMy to move quickly and responsibly.

Your Impact in the Role

• Serve as the primary legal advisor to Product and Engineering teams, counseling on legal risk across new and existing features, products, and business initiatives
• Lead ShopMy's data governance program, including data mapping, data processing agreements, and cross-functional data handling policies
• Advise on compliance with U.S. and international privacy laws (including CCPA/CPRA, GDPR, and emerging state and global regulations) as they apply to ShopMy's platform, creator tools, and brand-facing products
• Own and evolve ShopMy's AI policy, providing guidance on the responsible development and deployment of AI-powered features — including issues around training data, transparency, and automated decision-making
• Provide legal support and guidance on product marketing, disclosures, terms of use, privacy policies, and other public-facing documents
• Advise on contract terms and compliance requirements related to product integrations, data sharing, and technology partnerships
• Collaborate closely with Legal Operations, Security, and cross-functional partners to develop scalable compliance frameworks, policies, and training programs
• Monitor the regulatory landscape and proactively flag emerging legal risks and opportunities across privacy, AI, content moderation, and platform regulation
• Support the company's commitment to risk management and protecting the integrity and confidentiality of systems and data

You Are Energized By

• Embedding with product and engineering teams to shape how features are built — not just reviewing them after the fact
• Building data governance and compliance programs from the ground up in a high-growth environment
• Staying ahead of the rapidly evolving privacy and AI regulatory landscape
• Making complex legal concepts accessible and actionable for non-legal stakeholders
• Rolling up your sleeves and solving problems across a wide range of product, privacy, and compliance matters

What We Are Looking For

• A J.D. from an ABA-accredited U.S. law school, and membership in good standing to at least one state bar
• 5+ years of experience advising on product development, privacy, or technology compliance matters (in-house experience at a technology company strongly preferred)
• Deep working knowledge of U.S. and international privacy and data protection laws (CCPA/CPRA, GDPR, and emerging frameworks)
• Experience advising on AI, machine learning, or automated decision-making from a legal and compliance perspective
• Strong ability to counsel on legal risk across the product development lifecycle — from concept through launch
• Excellent communication skills, particularly the ability to translate complex privacy and regulatory requirements into practical, business-friendly guidance
• A collaborative team player who builds strong relationships across product, engineering, data, and business teams
• A proactive problem-solver who can anticipate needs and drive solutions independently with minimal supervision

Bonus Points

• Based in New York
• Familiarity with the creator economy, influencer marketing, or digital platform business models
• Experience standing up data governance programs, privacy frameworks, or AI policies from scratch
• CIPP/US, CIPP/E, CIPM, or similar privacy certification
• Background in adtech, martech, fintech, or e-commerce platforms
• Experience responding to regulatory inquiries, data incidents, or privacy-related crises