Product & Privacy Counsel

Brex is the intelligent finance platform that enables companies to spend smarter and move faster in more than 200 markets. By combining global corporate cards and banking with intuitive spend management, bill pay, and travel software, Brex empowers founders and finance teams to accelerate operations, gain real-time visibility, and control spend effortlessly. Brex’s AI-native automation and world-class service eliminate manual expense and accounting tasks, allowing customers to focus on what matters most. Tens of thousands of the world's best companies—including DoorDash, Coinbase, Robinhood, Zoom, Plaid, Reddit, and SeatGeek—run on Brex.

Working at Brex allows you to push your limits, challenge the status quo, and collaborate with some of the brightest minds in the industry. We’re committed to building a diverse team and inclusive culture, empowering you with the tools, resources, and support you need to grow your career.

About the role

The Legal team at Brex helps the company grow responsibly, advocating for Brex and the thousands of growing businesses we serve. We provide strategic advice and guidance to all Brex teams, protect the company, advise on risk, and represent Brex externally by negotiating with partners and interacting with regulators. Reimagining the financial system in a highly regulated environment requires creativity and resourcefulness, and we welcome the challenge.

As Product and Privacy Counsel at Brex, you will be a critical strategic leader helping the company navigate the complex regulatory landscape at the intersection of financial services and technology. You will scale our privacy program and monitor and assess legal and regulatory developments affecting Brex and its products. Together with cross-functional partners, you will develop and scale the privacy program and provide strategic guidance that protects and advances Brex's business objectives. You will collaborate closely with internal teams, bank partners, and industry groups to ensure Brex maintains a robust, forward-looking approach to privacy.

Responsibilities

• Scale Data Privacy and Security Programs: Work with engineering and business teams to expand and enhance data security, access, and privacy programs, optimizing for Brex's evolving data landscape.
• Implement Global Privacy Compliance: Develop and implement processes for strict adherence to domestic and international privacy regulations (GDPR, CCPA), establishing monitoring and testing frameworks with the Compliance team.
• Negotiate Data-Related Contracts: Lead drafting and negotiation of external agreements, focusing on data protection, sharing, and data product legalities, safeguarding Brex's interests.
• Provide Product and Regulatory Advice: Offer comprehensive legal oversight and actionable regulatory/compliance advice for all products, from scoping and design to go-to-market entry and marketing, while mitigating risks.
• Represent Brex Externally: Act as Brex's key representative with financial partners and regulatory bodies, building relationships and addressing inquiries.
• Integrate Innovation & Compliance: Collaborate with compliance, engineering, and business teams to identify innovation opportunities within strict regulatory compliance, assessing and mitigating risks.
• Manage Outside Counsel: Strategically manage external legal counsel for regulatory, privacy, and data matters, overseeing strategies and ensuring cost-effective advice.

Requirements

• 4+ years of working experience in a combination of law firm, technology, and fintech companies, with a track record of working on privacy-related and financial regulatory issues.
• Deep understanding of CCPA, GDPR, and financial regulatory regulations.
• Exceptional judgment and integrity, ability to handle complex matters independently, and a product-minded approach to lawyering.
• Entrepreneurial mindset and ability to work across various modes of communication; thrives in dynamic, fast-paced environments.
• Capacity to translate complex legal and regulatory concepts into clear, actionable guidance for non-legal stakeholders.
• Strong project management skills, with the ability to manage multiple initiatives and time-sensitive projects.
• J.D. from an accredited law school, with a demonstrated track record of excellence in privacy and financial regulatory law.
• Bar admission and active standing in at least one U.S. state.

Skills

• Experience in fintech or adjacent innovative financial services sectors is strongly preferred, with a nuanced understanding of emerging regulatory challenges.
• International privacy experience, with proven expertise in navigating cross-border regulatory complexities, including familiarity with international regulations.

Pay

The expected salary range for this role is $220,000 - $270,000 USD. The starting base pay will depend on factors including the candidate’s location, skills, experience, market demands, and internal pay parity. Depending on the position offered, equity and other forms of compensation may be provided as part of a total compensation package.