Job Description:
Job Summary
We are looking for a hard-working, competent, and adaptable attorney to support our rapidly growing and evolving Pluralsight teams. This position will focus primarily on Privacy, Product and Marketing compliance, SaaS contract review and negotiation, Intellectual Property (including trademarks and marketing IP), while also providing legal counsel on a range of Product and Marketing-related matters, including AI/ML and the EU AI Act. The role will also support the broader legal team, as available and as needed, in other substantive areas.
What you’ll do
The right candidate for this position will assist the Chief AI, Privacy and Digital Risk Counsel across four areas of focus:
Privacy, Cybersecurity and AI
Provide guidance to key internal stakeholders (PrivacyOps, Marketing, Product, Tech, Finance, Support, and Employment) on privacy, AI, and security matters
Maintain a working knowledge of privacy and AI laws and regulations, including GDPR, CCPA, sectoral privacy laws, and the EU AI Act, and keep up with emerging regulation
Maintain, develop, and evolve privacy notices, policies, procedures, DPIAs, and DPAs, including subprocessor determinations and notifications, and support internal training
Oversee the DSAR process, subprocessor audits, and Trust Center content, directing outside counsel on escalated DSARs, complaints and disputes, annual policy and playbook updates, and process and website audits
Provide AI guidance and support AI product development, including AI assessments, AI vendor reviews, disclaimer guidance, and EU AI Act compliance
Work closely with the Data Governance team on global privacy initiatives in furtherance of Pluralsight's legal obligations to protect the data of our customers, employees, vendors, and other third parties
Review and maintain customer and vendor security and privacy questionnaires (such as SIG and CAIQ) and related field guidance documents, and regularly review and maintain Data Privacy/Cyber Security, Marketing, and AI handbooks and job aids
Support the CISO org during a Security Incident, including regulatory and customer notification, contractual requirements, root cause analysis reviews, and internal and external communications
Assist with annual ISO and SOC assessments and audits, and review and update relevant GRC policies annually for legal and regulatory changes
SaaS Contracts, Technology Transactions and Partnerships
Review, draft, and negotiate SaaS agreements, DPAs, NDAs, vendor agreements, and partnerships, with a focus on privacy and AI/ML terms, balancing risk with business goals
Review high-priority contracts and procurement requests, and handle escalations on contract terms and obligations (for example, export control and government customer terms)
Scope and conduct initial legal reviews of partnership initiatives, such as content, channel, and technology partnerships
Direct outside counsel on in-depth technical reviews of major contracts as needed
Create and enforce templates, and keep playbooks, written guidance, and talking points current for the Contracts and Sales teams on recurring Privacy, Cybersecurity, IP, and AI/ML topics, including quarterly training meetings
Assist the demanding business teams in responding promptly to legal inquiries on customer and vendor questionnaires
Review and keep up with emerging regulations as they apply to customer, vendor, and partner agreements and the Products and Marketing we support
Marketing IP, Trademarks, Copyright and Brand
Review marketing collateral, content, Help Center articles, sales enablement materials, and promotional campaigns for copyright, licensing, third-party rights, claims, and disclaimers, flagging risks
Maintain a working knowledge of marketing and advertising laws, including CAN-SPAM, TCPA, DNC, telephone marketing, cookie consent, and the FTC Negative Option Rule, and guide Marketing accordingly
Assist with trademark matters, including clearance, registration, portfolio…