Privacy Counsel – Americas

Trustly

Privacy Counsel supporting execution of privacy strategy across the Americas, ensuring compliance with US, Canadian, and Brazilian privacy regulations. Collaborating with internal teams to embed privacy by design across Trustly.

Posted 5/14/2026full-timeNew York City • New York • 🇺🇸 United StatesMid-LevelSenior💰 $140,000 - $240,000 per yearWebsite

About the role

Key responsibilities & impact

Support the execution of Trustly's privacy strategy for the Americas region, ensuring compliance with US federal and state privacy laws (including CCPA/CPRA, applicable state privacy laws, and federal sector-specific regulations such as GLBA and FCRA), Canadian privacy laws (including PIPEDA and Quebec Law 25), and Brazilian privacy law (LGPD);
Conduct privacy impact assessments for new products, services, features, and business initiatives.
Provide practical, business-focused legal advice on privacy matters to internal stakeholders.
Advise on data subject rights requests (including rights to access, opt out etc).
Support privacy breach preparedness and incident response efforts for the Americas region, including contributing to incident response plans, coordinating breach investigations, and managing notifications to supervisory authorities and communications to data subjects.
Advise on and support the negotiation of data processing agreements, data transfer mechanisms (including standard contractual clauses, adequacy decisions, and other transfer tools), and privacy terms with vendors, partners, and customers.
Monitor legislative and regulatory developments affecting privacy and data protection in the Americas, including tracking US federal and state developments, providing timely analysis and recommendations to senior leadership.
Collaborate closely with the global Privacy & DPO team to ensure alignment on privacy strategies, share best practices, and coordinate cross-regional privacy initiatives.
Develop and maintain privacy documentation, including records of processing activities, legal advice notes and privacy compliance registers.
Support privacy-related audits, assessments, and due diligence activities.

Requirements

What you’ll need

Juris Doctor (JD) degree from an accredited law school and active bar admission in at least one US jurisdiction.
Minimum of 3-5 years of experience as a privacy attorney (including demonstrated experience advising on GLBA, CCPA, and state data protection laws).
Demonstrated experience in the FinTech or the payment services sector, with knowledge of the unique privacy challenges and regulatory landscape affecting payments and financial technology companies would be a bonus.
Experience working as part of a global privacy team, with proven ability to collaborate effectively across multiple jurisdictions and time zones.
Demonstrated experience handling data subject rights requests and data disclosure requests from law enforcement authorities.
Strong knowledge of US privacy laws such as CCPA/CPRA, all major state privacy laws, and federal sector-specific regulations such as GLBA and FCRA.
Some familiarity with Canadian privacy laws (including PIPEDA and provincial privacy laws such as Quebec Law 25) and Brazilian privacy law (LGPD), sufficient to identify relevant issues and support engagement with local counsel where needed.
Experience advising on cross-border data transfers, including standard contractual clauses, adequacy decisions, and other transfer mechanisms.
Relevant professional privacy certifications (e.g., CIPP/US, CIPM, CIPT) are highly desirable.
Strong interpersonal and communication skills and the ability to explain complex legal issues in simple terms.
Entrepreneurial and creative by nature, with a bias for action.
Strong legal drafting skills, with experience developing privacy policies, notices, consent mechanisms, data processing agreements, and controller-processor agreements.
Strong project management skills and ability to manage multiple complex privacy initiatives simultaneously.
Proven ability to provide practical, business-oriented privacy advice that balances legal compliance with business objectives.
Experience managing data breach incidents, including regulatory notifications to supervisory authorities and communications with affected data subjects.
Willingness to work flexible hours to collaborate with global privacy team members across different time zones

Benefits

Comp & perks

Flexible paid time off & generous PTO accrual plans
Comprehensive medical, dental, vision, and other insurances
FSA & HSA plans for medical and dependent care
Home office set-up allowance
Internet stipend
Retirement plan match for 401k and RRSP
Gender-neutral paid parental leave, and more!

ATS Keywords

✓ Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills & Tools

privacy impact assessmentsdata subject rights requestsdata processing agreementscross-border data transferslegal draftingprivacy policiesprivacy compliance registersincident responseprivacy auditsdata breach management

Soft Skills

interpersonal skillscommunication skillsproject managementcollaborationentrepreneurial mindsetcreative problem-solvingbusiness-oriented adviceability to explain complex issuesflexibilityability to manage multiple initiatives

Certifications

Juris Doctor (JD)CIPP/USCIPMCIPT