Legal Counsel - Product, Privacy and IP

Job Description:

Job SummaryWe are looking for a hard-working, competent, and adaptable attorney to support our rapidly growing and evolving Pluralsight teams. This position will focus primarily on Privacy, Product and Marketing compliance, SaaS contract review and negotiation, Intellectual Property (including trademarks and marketing IP), while also providing legal counsel on a range of Product and Marketing-related matters, including AI/ML and the EU AI Act. The role will also support the broader legal team, as available and as needed, in other substantive areas.

What you’ll doThe right candidate for this position will assist the Chief AI, Privacy and Digital Risk Counsel across four areas of focus:

Privacy, Cybersecurity and AI

• Provide guidance to key internal stakeholders (PrivacyOps, Marketing, Product, Tech, Finance, Support, and Employment) on privacy, AI, and security matters

• Maintain a working knowledge of privacy and AI laws and regulations, including GDPR, CCPA, sectoral privacy laws, and the EU AI Act, and keep up with emerging regulation

• Maintain, develop, and evolve privacy notices, policies, procedures, DPIAs, and DPAs, including subprocessor determinations and notifications, and support internal training

• Oversee the DSAR process, subprocessor audits, and Trust Center content, directing outside counsel on escalated DSARs, complaints and disputes, annual policy and playbook updates, and process and website audits

• Provide AI guidance and support AI product development, including AI assessments, AI vendor reviews, disclaimer guidance, and EU AI Act compliance

• Work closely with the Data Governance team on global privacy initiatives in furtherance of Pluralsight's legal obligations to protect the data of our customers, employees, vendors, and other third parties

• Review and maintain customer and vendor security and privacy questionnaires (such as SIG and CAIQ) and related field guidance documents, and regularly review and maintain Data Privacy/Cyber Security, Marketing, and AI handbooks and job aids

• Support the CISO org during a Security Incident, including regulatory and customer notification, contractual requirements, root cause analysis reviews, and internal and external communications

• Assist with annual ISO and SOC assessments and audits, and review and update relevant GRC policies annually for legal and regulatory changes

SaaS Contracts, Technology Transactions and Partnerships

• Review, draft, and negotiate SaaS agreements, DPAs, NDAs, vendor agreements, and partnerships, with a focus on privacy and AI/ML terms, balancing risk with business goals

• Review high-priority contracts and procurement requests, and handle escalations on contract terms and obligations (for example, export control and government customer terms)

• Scope and conduct initial legal reviews of partnership initiatives, such as content, channel, and technology partnerships

• Direct outside counsel on in-depth technical reviews of major contracts as needed

• Create and enforce templates, and keep playbooks, written guidance, and talking points current for the Contracts and Sales teams on recurring Privacy, Cybersecurity, IP, and AI/ML topics, including quarterly training meetings

• Assist the demanding business teams in responding promptly to legal inquiries on customer and vendor questionnaires

• Review and keep up with emerging regulations as they apply to customer, vendor, and partner agreements and the Products and Marketing we support

Marketing IP, Trademarks, Copyright and Brand

• Review marketing collateral, content, Help Center articles, sales enablement materials, and promotional campaigns for copyright, licensing, third-party rights, claims, and disclaimers, flagging risks

• Maintain a working knowledge of marketing and advertising laws, including CAN-SPAM, TCPA, DNC, telephone marketing, cookie c...