Associate General Counsel - Privacy & Compliance

About the role

Based in Reston, Virginia, the Associate General Counsel is an internal legal role reporting to the General Counsel. The position supports OVHcloud’s legal operations and business growth by providing guidance to sales, product, marketing, customer success, operations, and senior management teams. The role leads the company’s privacy and data protection function, supports regulatory compliance across the business, and handles commercial transactions, product launches, and sales and marketing activities. The Associate General Counsel delivers practical, business-oriented legal advice to help stakeholders assess risk, structure solutions, and make informed decisions aligned with OVHcloud’s strategic objectives and legal requirements.

Responsibilities

• Serve as primary legal advisor for the company’s privacy program, including developing internal privacy initiatives, tracking privacy law developments across applicable jurisdictions, and drafting privacy notices, data processing agreements, and privacy impact assessments.
• Advise product development, operations, sales, and marketing teams on legal and regulatory requirements from product development through launch, including consumer protection, data protection, and related compliance obligations.
• Proactively identify regulatory risks and design compliance frameworks to address them.
• Establish and maintain a regulatory monitoring program to track new and evolving laws, regulations, and enforcement actions affecting privacy, data protection, data security, consumer protection, digital advertising, and intellectual property across jurisdictions where OVHcloud operates.
• Analyze products, policies, and strategic initiatives to provide practical legal guidance and risk mitigation strategies.
• Advise on cross-border data transfer mechanisms, data localization requirements, and jurisdiction-specific compliance obligations applicable to cloud infrastructure services.
• Identify, develop, and deliver training on corporate policies, compliance requirements, and risk management expectations, including tailored privacy and data protection training for specific business functions.
• Draft, negotiate, review, and advise on complex commercial agreements with domestic and international customers, partners, and vendors, including enterprise sales agreements, reseller agreements, licensing agreements, master service agreements, vendor agreements, consulting agreements, and confidentiality agreements.
• Review marketing activities and materials for legal compliance and risk, including company websites, press releases, white papers, blog posts, and promotional activities.
• Handle pre-litigation legal disputes, including assessing claims, coordinating internal responses, advising stakeholders, and supporting resolution strategies.
• Advise multiple internal stakeholders on complex legal and business matters, providing responsive, practical, and business-oriented guidance.
• Build and maintain strong relationships with internal teams, senior management, external partners, customers, vendors, and other stakeholders to support effective legal operations and business objectives.

Requirements

• Juris Doctor (JD) degree from an accredited law school and active membership in good standing in at least one U.S. state bar.
• 8+ years of relevant legal experience, including advising business stakeholders on commercial, technology, regulatory, privacy, and compliance matters.
• Deep substantive knowledge of privacy laws and frameworks (including GDPR, U.S. state privacy laws, and sector-specific requirements such as HIPAA and COPPA), data protection requirements, and related compliance considerations affecting technology products, cloud services, marketing activities, and customer-facing operations.
• Ability to translate regulatory requirements into scalable compliance programs.
• Experience building or significantly contributing to a corporate privacy program, including policy development, data mapping, vendor due diligence, incident response protocols, and regulatory engagement.
• Substantial experience supporting business teams in the negotiation and execution of customer, partner, vendor, and technology-related agreements.
• Proven experience drafting, negotiating, and reviewing complex commercial agreements for software licensing, Infrastructure as a Service (IaaS), cloud services technologies, enterprise sales, and digital sales.
• Excellent drafting, negotiation, analytical, interpersonal, and problem-solving skills, with the ability to translate legal requirements into practical business guidance.
• Ability to manage multiple assignments simultaneously, prioritize effectively, and adapt to changing business needs and competing deadlines.
• Ability to work independently, exercise sound judgment, take ownership of legal matters, and meet strict deadlines.
• Experience working with and leading cross-functional teams to execute objectives and support business initiatives.
• Ability to work effectively in an international and multicultural company environment.
• Strong written and verbal communication skills, sound professional judgment, and high responsiveness to internal clients, leadership, and business stakeholders.

Preferred Qualifications

• Large law firm and/or prior in-house legal experience supporting technology companies.
• CIPP/US, CIPP/E, CIPM, or other recognized privacy certification.
• Experience with regulatory audits, investigations, or responses to data protection authority inquiries.
• Experience with technology transactions, intellectual property matters, and cloud services, including Infrastructure as a Service (IaaS) or related infrastructure offerings.
• Experience advising business and product teams on legal risk mitigation across technology product platforms.

Pay

Base pay range: $230,000 – $250,000 (based on relevant experience).