Associate General Counsel, Privacy (Americas, United …, Américas Cárdenas

About the team Shopify's Regulatory and Privacy Legal team is the front line for every regulatory, privacy, and data protection issue that touches the platform. We advise product and engineering teams on how to build things that work for merchants and comply with the law — often in jurisdictions where the law is still being written. We handle regulator inquiries, manage privacy incidents, negotiate with partners on data practices, and build the internal frameworks that make all of it scale. The team sits within Legal and works closely with, well, just about every other team in the company. About the role As a privacy lawyer, you’ll tackle complex product questions where GDPR and CCPA point in different directions, ambiguous data flows that don’t map cleanly onto any regulatory framework, and partner negotiations over contested data rights. You’ll shape how a platform used by millions of merchants handles data at scale and respond to a regulatory landscape that changes faster than your least‑used tracker. The role reports to the Director, Privacy Legal. Responsibilities
- Provide privacy counsel on complex product launches, new features, and strategic partnerships.
- Partner on managing regulatory relationships and responses for privacy‑specific inquiries from DPAs and US state enforcement agencies.
- Drive cross‑functional privacy initiatives that grow the program through building resources, frameworks, and playbooks.
- Advise on data protection aspects of commercial agreements with merchants, vendors, and partners.
- Collaborate with Privacy Engineering and Trust on incident response, data governance, and compliance infrastructure.
- Maintain subject‑matter expertise in evolving general privacy law. Core Qualifications
- Qualifying law degree and license to practice in the US, Canada, Ireland, or UK.
- 8+ years of relevant legal experience, ideally a mix of law firm, government, and in‑house roles.
- Substantial experience advising on privacy and data protection matters, including GDPR and CCPA.
- Technical curiosity – ability to understand data flows and compliance impact.
- Experience managing outside counsel.
- Privacy certification (CIPP/US, CIPP/E, CIPM) is a plus. Preferred
- Experience engaging with regulators or enforcement agencies on privacy matters.
- Experience advising on AI and data governance issues.
- Experience building or shipping something using AI tools. #J-18808-Ljbffr Postúlate en Kit Empleo: kitempleo.com.mx/empleo/5t8x2z