About Backblaze
Backblaze is the object storage leader in the open cloud movement, fueling customer success with cloud storage built purposefully to unlock budgets, unburden administrators, and unleash innovators. Together with our partners, we’re helping customers break free from the restrictive, overpriced legacy solutions that hold them back, and blaze forward with the full power of the open cloud in their hands.
Founded in 2007, we scaled the business with less than $3 million in outside funding until 2021, when we did a traditional IPO on the Nasdaq stock exchange. Today, Backblaze generates over $100m in revenue and is the leading specialized storage cloud - managing over three billion gigabytes of data storage for 500K+ customers in 175+ countries, including businesses, developers, IT professionals, and individuals.
But while there is a lot to celebrate in our past, there is almost as much opportunity ahead of us. We are seeking a
Sr. Privacy Counsel!
About The Role
This role is responsible for providing legal support on a broad range of privacy topics to internal clients and driving cross-functional initiatives across the business involving a variety of complex legal and regulatory issues relating to privacy, data protection, and security-related risks and obligations. This requires strong business acumen, a substantive knowledge of global privacy laws, and the ability to both work independently and with large multi-stakeholder teams. We are looking for someone with sharp analytical and communication skills, who is diligent, proactive, collaborative, and has demonstrated excellent legal and business judgment and strategic thinking.
What You’ll Do
- Become an integral member of our growing Legal and Compliance team and help develop, implement and improve privacy frameworks and processes to ensure we meet our obligations under global privacy laws, including GDPR, CCPA/CPRA, and HIPAA
- Work collaboratively, effectively and cross-functionally with key stakeholders to implement, oversee and manage the entire lifecycle of data subject requests (or privacy-related complaints)
- Work closely with Products, Sales, Marketing, Security, Engineering and other teams across the company to facilitate integration of privacy, risk and compliance requirements into business processes, operations and product life cycles, including areas related to product development, partnerships, marketing campaigns, and other business development opportunities.
- Provide products counseling on new and existing products, features, and other uses of personal data to ensure compliance with applicable data protection laws and industry practices
- Coordinate and drive cross-stakeholder alignment regarding privacy and data protection on all matters related to employee privacy.
- Work closely with Marketing and Sales teams to provide legal guidance on digital advertising technology, data analytics, and data solutions in compliance with global privacy laws.
- Create, maintain and monitor privacy compliance documentation such as drafting and updating of privacy notices, consent statements, data retention schedule, relevant privacy compliance controls, data map, Privacy Impact Assessments and Transfer Impact Assessments
- Provide legal support in drafting, reviewing and negotiation of Data Processing Agreements, Business Associate Agreements, and other commercial agreements with a focus on privacy and data protection
- Collaborate with internal teams on vendor management and maintenance of subprocessors, including responsibility for creating policies and processes, reviewing and negotiating contracts to support transactions involving PII and/or PHI
- Support the development and delivery of privacy training and other communications to increase employee understanding of company privacy policies, data handling practices and procedures and legal obligations
- Provide support relating to data incident investigation, including identifying legal obligations, supporting incident response efforts and preparing incident reports in accordance with established protocol and documentation requirements
- Stay abreast of, and advise on, existing and emerging US and global data privacy laws (in particular HIPAA, CCPA, CCPR, GDPR and other key privacy laws)
The Right Fit
- Extensive and in-depth knowledge and understanding of privacy law, including US and European data protection law (including GDPR, CCPA/CPRA, and HIPAA)
- Experience providing pragmatic and actionable advice to internal clients on legal risks with a focus on practical solutions and a proven track record of success.
- Sound business judgment, and flexibility/adaptability to manage multiple wide-ranging matters, conflicting deadlines, and new areas of expertise as business needs change
- Proven ability and commitment to work both independently and collaboratively with numerous people at all levels throughout the organization
- Excellent organizational, analytical, and communication skills to express complex legal matters in clear, concise, business-friendly language with a strong record of effective cross-group collaboration
- Reliable and hands-on, with strong prioritization skills managing a variety of assignments and deadlines
- 6+ years of legal experience in a law firm and in-house legal department, with a track record of providing practical business-friendly advice on privacy and data protection issues.
- J.D. degree and an active membership in at least one U.S. state bar
- CIPP/US or CIPP/EU certification preferred
- Preferred to be local to the Bay Area, but open to remote work
At this point, we hope you're feeling excited about the job description you're reading. Even if you don't feel you meet every requirement, we still encourage you to apply. Learning, developing, and growing are key parts of our culture. We're eager to meet people who believe in our mission and can contribute to our team in various ways. We want people to feel comfortable expressing their true selves and to come, stay, and do their best work here.
Backblaze Perks
- 100% healthcare for family
- Dental and vision plan
- Competitive compensation and 401K
- RSU grants for full-time employees
- ESPP program
- Flexible vacation policy
- Maternity & paternity leave
- MacBook Pro to use for work plus a generous stipend to personalize your workstation
- Childcare bonus (human children only)
- Fertility treatment and support
- Learning & development program
- Commuter benefits
- Culture that supports a healthy work-life balance
To provide greater transparency to candidates, we share base pay ranges for all US-based job postings regardless of state. We set standard base pay ranges for all roles based on function, level, and country location, benchmarked against similar-stage growth companies. Final offer amounts are determined by multiple factors, including candidate location, skills, depth of work experience, and relevant licenses/credentials, and may vary from the amounts listed below.
The base pay range for this position is $175,000 to $210,000
At Backblaze, we value being fair and good to our customers, partners, and employees. That’s why diversity, equity, and inclusion are at the core of our values. We are committed to fostering a workforce where all employees feel a sense of belonging regardless of race, ethnicity, nationality, gender, sexual orientation, age, religion, socio-economic status, ability, veteran status, and education. We believe that our dedication to cultivating a diverse workspace not only allows us to better serve our customers in over 175 countries, but further reinforces our commitment to doing the right thing.
We are proud to be an Equal Opportunity Employer.
To understand more about the data we collect and process as part of your application, please view our Backblaze Employee Privacy Notice.
