Senior Counsel (Privacy and AI)

✨ One platform, a whole world of opportunity

The best jobs are often restricted to a few wealthy cities, but talent exists everywhere. Oyster set out to change this by launching a global employment platform that enables companies to hire, pay, and support talent anywhere.

We're proof that a strong, engaged culture doesn't require an office. Since January 2020, Oyster has:

🌏 Built a distributed team of 400+ across 60+ countries

👩‍💻 Featured in Forbes as #9 in FlexJobs Top 30 Companies for remote jobs

🌈 Formed a diverse leadership team and a workforce that's 60% female

🏆 Earned top employee engagement scores

🦄 Raised \(286 million; valued at \)1.2 billion

💚 Achieved B Corp status in 2023

Our momentum shows the power of global employment, and we're just getting started! If you want to help us drive change and work remotely, we'd love for you to apply!

👩‍💻 The Role

Location: While this position is posted in a specific location, all of Oyster's positions are fully remote and you can work from home. Forever.To create the best experience for our new hire, this role requires you to be based in Europe +1 / +2 UTC time zone.

Oyster is on a mission to create a more equal world by enabling companies to hire anyone, anywhere. As Privacy & AI Counsel on our Trust & Technology team, you will be a key subject-matter expert for global privacy, data governance, and AI compliance. Reporting to the Director & Senior Managing Counsel, you'll lead strategic initiatives that shape Oyster's privacy program, operationalize the EU AI Act and adjacent frameworks, and embed privacy‑by‑design and responsible AI practices across Product, Engineering, IT/Security, People, and Commercial teams.

This role is ideal for a pragmatic, business‑first lawyer who can turn complex legal requirements into clear guidance, frameworks, and tooling that scale in a high‑growth, fully‑distributed environment

Key Responsibilities

Data Protection Leadership & Strategy

• Drive Oyster's global privacy program and AI roadmaps and metrics with a focus on business objectives, risk appetite, and trust commitments.

• Serve as counsel for EU data protection regulations, including international transfers (SCCs, TIAs, DPF where applicable), records of processing (ROPA), retention, and data governance.

• Support the company‑wide strategy for AI governance (EU AI Act readiness, model/system classification, risk management, data/records obligations, provider/ deployer duties, transparency and human oversight).

• Partner with leadership on executive‑level and customer‑facing trust narratives; prepare briefings and documentation for team leads, execs, and auditors.

Product & Engineering (Privacy‑by‑Design + Responsible AI)

• Advise on new and existing products/workflows (including automation and ML features): run DPIAs/PIAs, AI impact assessments, dataset and data‑minimization reviews, and human‑in‑the‑loop/appeal mechanisms.

• Translate requirements into actionable controls (requirements, checklists, guardrails, redlines) and integrate with issue trackers and engineering workflows.

• Define model/data governance requirements: data sourcing, annotation, retention/deletion, access controls, evaluation, monitoring, and incident/rollback plans.

Commercial & Vendor

• Draft/maintain DPAs, SCCs, and AI‑related contractual clauses; negotiate high‑impact privacy and AI terms with customers and vendors.

• Partner with procurement and security teams on third-party due diligence, transfer impact assessments, and ongoing assurance.