[Hiring] VP - Deputy General Counsel @OSV

Role Description

OSV is seeking a VP, Deputy General Counsel to lead legal strategy and day-to-day counsel across Privacy, Compliance, Product Legal, and Artificial Intelligence (AI). Reporting to the Chief Legal Officer, this attorney will serve as a trusted advisor to product, engineering, marketing, and business teams, and will own the company's legal approach to data protection, cybersecurity, and the responsible development and deployment of AI and data-driven products. The ideal candidate combines deep regulatory knowledge with pragmatic, business-focused judgment and is comfortable operating as both a hands-on advisor and a strategic leader.

Key Responsibilities

• Product Legal Support
  • Serve as the go-to legal advisor for day-to-day questions from the product and engineering teams on new features and builds that affect disclosures, data sharing, or the customer experience.
  • Draft, review, and maintain consumer-facing agreements, online terms, and regulatory notices to reflect product updates and compliance/privacy initiatives and applicable regulation/law.
  • Review marketing campaigns for legal compliance, including offer T&Cs, promotional disclosures, sweepstakes rules, and modifications to approved templates.
• Regulatory Compliance and Risk Advisor
  • Provide legal guidance on U.S. and global privacy and cybersecurity laws, regulations, and enforcement trends.
  • Interpret evolving regulatory guidance and translate supervisory expectations into actionable legal advice.
  • Monitor emerging issues including AI governance, data ethics, digital identity, and advanced cyber threats.
  • Advise on privacy-by-design and security-by-design, data minimization and retention, cross-border data transfers, access controls, and other data-related issues.
• Incident Response and Cyber Events
  • Lead the legal response to privacy and cybersecurity incidents, including investigation, legal risk assessment, and regulatory and contractual analysis.
  • Coordinate closely with internal stakeholders and external forensic firms, outside counsel, and crisis management advisors.
  • Advise on notification obligations, litigation risk, and regulatory engagement arising from cyber events.
• Commercial Transactions and Technology Enablement
  • Advise on privacy and cybersecurity issues across commercial transactions, including vendor engagements, cloud services, SaaS platforms, fintech partnerships, strategic investments, and M&A.
  • Draft, negotiate, and approve data protection and information security provisions in customer, vendor, and partner agreements.
• Emerging Technology and Innovation
  • Advise on privacy, data protection, and cybersecurity considerations related to the design, development, and deployment of artificial intelligence, advanced analytics, and other data-driven products and business models.
• Education and Enablement
  • Educate legal, technology, and business teams on privacy and cybersecurity requirements in a pragmatic, business-focused manner.
  • Identify and support efforts to scale consistent, risk-based legal guidance across the enterprise.

Qualifications

• Minimum of 15 years of relevant legal experience, with substantial depth in privacy, data protection, cybersecurity, and technology/commercial law; in-house experience advising product and engineering teams strongly preferred.
• Juris Doctor (JD) from an ABA-accredited U.S. law school.
• Active license to practice law in good standing in the attorney's state of residence.
• Demonstrated knowledge of U.S. state and federal privacy and data protection laws (e.g., CCPA/CPRA and other state privacy statutes), and familiarity with global frameworks such as GDPR. CIPP and CISSP certifications are a plus.
• Working knowledge of emerging AI governance frameworks and the legal issues raised by AI-enabled products and analytics.
• Experience leading or supporting cybersecurity incident response, including coordination with forensic firms, outside counsel, and regulators.
• Strong track record negotiating data protection and security terms in commercial, vendor, and technology agreements.
• Excellent judgment, business acumen, and the ability to translate complex regulatory requirements into clear, actionable guidance for non-legal audiences.
• Exceptional written and verbal communication skills, with the ability to build trust across legal, product, engineering, marketing, and executive teams.

Benefits

• Values-based culture.
• Upward mobility.
• Professional development with opportunities of all kinds.