Senior Privacy Counsel & DPO – SaaS & Data Protection (AGC or DGC)

About Sand

Sand Technologies is a fast-growing enterprise AI company that solves real-world problems for large blue-chip companies and governments worldwide.

We’re pioneers of meaningful AI: our solutions go far beyond chatbots. We are using data and AI to solve the world’s biggest issues in telecommunications, sustainable water management, energy, healthcare, climate change, smart cities, and other areas that have a real impact on the world. For example, our AI systems help to manage the water supply for the entire city of London. We created the AI algorithms that enabled the 7th largest telecommunications company in the world to plan its network in 300 cities in record time. And we built a digital healthcare system that enables 30m people in a country to get world-class healthcare despite a shortage of doctors.

We’ve grown our revenues by over 500% in the last 12 months while winning prestigious scientific and industry awards for our cutting-edge technology. We’re underpinned by over 300 engineers and scientists working across Africa, Europe, the UK and the US.

About the role

We are seeking a Privacy Counsel with SaaS experience to lead our privacy and data protection initiatives, ensuring regulatory compliance and advising cross-functional teams on complex privacy matters.

The Privacy Counsel will provide legal guidance on privacy, data protection, and SaaS compliance matters across multiple jurisdictions. This role requires an attorney capable of advising on GDPR, CCPA, and other global privacy regulations, managing cross-border data transfers, and embedding privacy by design into our products and operations.

Specific Responsibilities

• Serve as DPO for Sand and its international subsidiaries
• Provide legal advice on global privacy compliance, including GDPR, CCPA, and other applicable laws.
• Advise product, engineering, and business teams on privacy-by-design and SaaS data protection requirements.
• Manage privacy risk assessments, audits, and cross-border data transfers.
• Draft and maintain privacy policies, procedures, and compliance documentation.
• Coordinate privacy program initiatives across multiple jurisdictions.
• Support ad hoc legal projects related to privacy and SaaS compliance.

Location

• Global, Remote

Requirements

• Law degree (J.D. or equivalent) and admission to practice in at least one jurisdiction
• Substantive experience with GDPR, CCPA, and cross-border data transfer mechanisms in a technology / data-centric business.
• 8+ years of experience in privacy law, data protection compliance, or technology law, including substantive experience running an international privacy program as DPO or deputy to DPO.
• Strong understanding of SaaS business models and associated privacy risks.
• Proven project management skills with ability to coordinate multiple stakeholders.
• Excellent written and verbal communication.
• Collaborative, proactive, and able to work independently.
• Highly detail- and process-oriented.
• Strong integrity and ethical standards.

Requirements - Preferable

• Flexibility to coordinate with North America and EMEA teams
• Senior level experience in legal department of a fast-paced, hyperscaling SAAS or technology company

Personal Attributes

• Client Centricity & Integrity: We let Our Clients Run the Company, Surf Like Yvon to stay true to our values, and Play the Long Game with integrity.
• Collaboration and Inclusion: We live by Each One, Teach Ten and ensure Everybody is Welcome.
• Operational Excellence and Simplicity: We K.I.S.S. by keeping things simple while always striving to Raise the Bar.
• Action, Ownership, and Execution: We Decide, Get Stuff Done, and Do Hard Things with accountability.
• Growth, Innovation, and Resilience: We Choose Growth, Pioneer boldly, and remember There is No Failure.

Due to the considerable amount of virtual work and interaction with colleagues and customers in different physical locations internationally, it is essential that the successful applicant has the drive and ethic to succeed in working in small teams physically but in larger efforts virtually. Self-drive to communicate constantly using web collaboration and video conferencing is essential.