Privacy Data & AI Counsel

📋 Description

• • As Ramp's Privacy & AI Counsel, you will be a pivotal legal advisor, navigating the intricate landscape of data privacy, cybersecurity, data governance, and Artificial Intelligence. Your expertise will be crucial in guiding Ramp through an ever-evolving regulatory environment, empowering our product and engineering teams to innovate responsibly, at speed, and at scale. Reporting to our Senior Privacy Counsel, this role sits at the dynamic intersection of law, cutting-edge technology, and the trust essential to our business.
• • You will collaborate extensively across departments, including Engineering, Product, Security, and Compliance, to champion and embed privacy- and security-by-design principles into the very fabric of our product development lifecycle. As Ramp continues to expand its AI capabilities and extend its global reach, you will be instrumental in shaping strategic direction, establishing robust frameworks, developing comprehensive policies, and refining best practices across the organization.
• • A core responsibility will be advising on global privacy and AI laws and frameworks. This includes a deep understanding of regulations such as the California Consumer Privacy Act (CCPA), other state-level privacy and marketing laws, the General Data Protection Regulation (GDPR), the EU AI Act, the Personal Information Protection and Electronic Documents Act (PIPEDA), and various other international laws and frameworks. Your work will encompass critical areas like data mapping, managing data subject requests (DSRs), and conducting thorough privacy impact assessments (PIAs).
• • You will play a key role in automating and streamlining privacy program operations. This involves managing and enhancing processes for data mapping, efficiently handling DSRs, and conducting PIAs, leveraging technology to improve efficiency and compliance.
• • In partnership with our Product and Engineering teams, you will provide essential legal counsel on new features and products, ensuring they are developed with privacy and security at the forefront, and facilitating their successful launch.
• • You will collaborate closely with Information Security, Engineering, and other key stakeholders to support incident management and business continuity efforts. This includes refining and maintaining incident response policies and business continuity plans, developing and delivering training programs, conducting tabletop exercises to test preparedness, and assisting in the management of response and recovery activities during security incidents or other critical business continuity events.
• • Your role will extend to providing commercial legal support, including drafting, reviewing, and assisting in the negotiation of Data Processing Agreements (DPAs). You will also be responsible for advising on and negotiating data, AI, and information security provisions within customer, vendor, and partner contracts, ensuring Ramp's interests and compliance obligations are met.
• • A proactive approach to regulatory monitoring is essential. You will continuously track and analyze developments in privacy, cybersecurity, AI, and data governance regulations at the federal, state, and international levels. The insights gained will be translated into clear, actionable business advice for relevant teams.
• • You will be responsible for developing and delivering comprehensive training programs on privacy, AI, and information security to internal stakeholders. This initiative aims to foster a strong culture of awareness and enhance the enablement of our business partners in these critical areas.
• • This role demands a strategic mindset, the ability to anticipate future legal and regulatory challenges, and a commitment to enabling innovation while upholding the highest standards of data protection and ethical AI deployment. You will be a trusted advisor, contributing significantly to Ramp's reputation for security and trustworthiness as we continue our rapid growth and global expansion.