Director, Legal

Arctic Wolf is seeking an experienced privacy attorney to serve as Director, Privacy and take day-to-day ownership of our global privacy program. Reporting to the VP of Commercial & Privacy, you will be the hands-on owner of privacy compliance across our channel-led, SaaS-enabled cybersecurity business serving more than 12,000 customers worldwide.

This is a builder role for a pragmatic lawyer who translates evolving global privacy and data protection requirements into scalable processes. You will partner with Product and Engineering, Security, IT, People, Legal and other organizations to help shape privacy governance.

Responsibilities

• Own day-to-day operation of the global privacy program, including compliance with GDPR, CCPA/CPRA, other US state privacy laws, and other applicable regimes across the US, Canada, Europe, India and Australia, and monitor new laws and regulatory guidance to stay compliant ahead of effective dates.
  
• Draft, maintain, and improve privacy policies, notices, standards, records of processing, data maps, retention schedules, and internal guidance.
  
• Conduct and document data protection impact assessments, transfer impact assessments, and privacy reviews.
  
• Partner with our product counsel to embed privacy by design into our product development. Partner with Product and Engineering on data minimization, purpose limitation, transparency, access, sharing, and retention, and reviewing technical specifications and data flows with privacy implications.
  
• Serve as a primary privacy contact for security and privacy incidents, working with Security Operations and outside counsel to assess notification obligations and manage regulator and customer inquiries.
  
• Serve as an escalation point for commercial legal and sourcing teams on privacy terms in customer, partner, reseller and vendor agreements, and maintain data processing agreements, subprocessor disclosures, standard contractual clauses, and business associate agreements.
  
• Handle data subject requests, privacy escalations, and customer and prospect privacy diligence, and build playbooks, templates, and training so other teams can move quickly while staying compliant.
  
• Manage outside counsel and privacy tooling vendors, including scope, budget, and quality of work product.
  

Qualifications

• J.D. from an accredited law school and active membership in good standing with at least one U.S. state bar.
  
• Seven or more years of relevant legal experience, including substantial privacy and data protection work and meaningful in-house experience at a technology company.
  
• Deep working knowledge of GDPR, CCPA/CPRA, and other major global privacy frameworks, plus the emerging AI regulatory landscape.
  
• Demonstrated experience operating a privacy program, not only advising on one, including assessments, records of processing, data subject requests, vendor review, and advising Product and Engineering on privacy by design and technical data flows.
  
• Experience supporting privacy and security incident response, including breach analysis and regulator inquiries.
  
• Strong drafting and negotiation skills covering data processing agreements, standard contractual clauses, and privacy and security terms in commercial contracts.
  
• Excellent business judgment and a risk-based, solutions-oriented approach, with a demonstrated AI-first mindset, comfort with ambiguity, and a strong sense of ownership in a fast-moving environment.
  
• International Association of Privacy Professionals (IAPP) certification such as CIPP/US, CIPP/E, CIPM, or CIPT is strongly preferred.
  
• Experience at a cybersecurity, security software, or managed security provider, including security telemetry, log data, and threat intelligence data flows, and channel/MSP data-sharing arrangements.
  
• Experience with public sector customer privacy requirements across state, local, and education markets in the US, Canada, Australia, and Europe is preferred.
  

About Arctic Wolf

At Arctic Wolf, we foster a collaborative and inclusive work environment that thrives on diversity of thought, background, and culture. This is reflected in our multiple awards, including Top Workplace USA (2021-2025), Best Places to Work - USA (2021-2025), Great Place to Work - Canada (2021-2024), Great Place to Work - UK (2024-2026), and Kununu Top Company - Germany (2024-2026). Our commitment to bold growth and shaping the future of security operations is matched by our dedication to customer satisfaction, with over 10,000 customers worldwide and more than 2,000 channel partners globally. As we continue to expand globally and enhance our technology, Arctic Wolf remains the most trusted name in the industry.


Our Values

Arctic Wolf recognizes that success comes from delighting our customers, so we work together to ensure that happens every day. We believe in diversity and inclusion, and truly value the unique qualities and unique perspectives all employees bring to the organization. And we appreciate that-by protecting people's and organizations' sensitive data and seeking to end cyber risk- we get to work in an industry that is fundamental to the greater good.


We celebrate unique perspectives by creating a platform for all voices to be heard through our Pack Unity program. We encourage all employees to join or create a new alliance. See more about our Pack Unity here.


We also believe and practice corporate responsibility, and have recently joined the Pledge 1% Movement, ensuring that we continue to give back to our community. We know that through our mission to End Cyber Risk we will continue to engage and give back to our communities.


All wolves receive compelling compensation and benefits packages, including:

• Equity for all employees
  
  
• Flexible time off and paid volunteer days
  
  
• RRSP and 401k match
  
  
• Training and career development programs
  
  
• Comprehensive private benefits plan including medical, mental health, dental, disability, life and AD&D, and value-added services
  
  
• Robust Employee Assistance Program (EAP) with mental health services
  
  
• Fertility support and paid parental leave
  
  
• Arctic Wolf is an Equal Opportunity Employer and considers applicants for employment without regard to race, color, religion, sex, orientation, national origin, age, disability, genetics, or any other basis forbidden under federal, provincial, or local law. Arctic Wolf is committed to fostering a welcoming, accessible, respectful, and inclusive environment ensuring equal access and participation for people with disabilities. As such, we strive to make our entire experience as accessible as possible and provide accommodations as required for candidates and employees with disabilities and/or other specific needs where possible. Please let us know if you require any accommodation by emailing View email address on click.appcast.io. View our Hiring Page to learn more about our application process.
  
  

Security Requirements

Conducts duties and responsibilities in accordance with AWN's Information Security policies, standards, processes, and controls to protect the confidentiality, integrity and availability of AWN business information (in accordance with our employee handbook and corporate policies).


Background checks are required for this position.


This position may require access to information protected under U.S. export control laws and regulations, including the Export Administration Regulations ("EAR"). Please note that, if applicable, an offer for employment will be conditioned on authorization to receive software or technology controlled under these U.S. export control laws and regulations.


The base salary range for this job family is 186,000 to 302,000 USD annually. This range reflects the base pay the company reasonably expects to offer for this position, aligned to the broader job family base pay structure. Actual base pay may vary based on skills, experience, and location, including job family level. In addition to base pay, Arctic Wolf offers variable incentive compensation, new hire equity grants, and a comprehensive benefits package.