Privacy Counsel

Job description

Figma is growing our team of passionate creatives and builders on a mission to make design accessible to all. Figma’s platform helps teams bring ideas to life—whether you're brainstorming, creating a prototype, translating designs into code, or iterating with AI. From idea to product, Figma empowers teams to streamline workflows, move faster, and work together in real time from anywhere in the world. If you're excited to shape the future of design and collaboration, join us! We're looking for an attorney with expertise in privacy law and AI governance to join Figma's Legal team. In this role, you'll collaborate with Product, Engineering, Policy, and Commercial teams to support Figma's responsible growth, advising on privacy compliance, AI product development, and emerging regulatory requirements. You'll play a key role in shaping how Figma navigates a shifting regulatory environment spanning privacy, AI, and emerging global frameworks while enabling innovation across our platform. This is a full-time role that can be held from one of our US hubs or remotely in the United States. What you'll do at Figma: Advise on global privacy laws and regulations, including GDPR, CCPA/CPRA, and emerging international frameworks, as they apply to Figma's products, features, and data practices Partner with Product and Engineering teams to assess legal and regulatory risks associated with AI features and products, including evolving requirements such as the EU AI Act Draft, review, and negotiate data processing agreements, data-sharing agreements, and other commercial contracts with privacy implications Conduct privacy reviews and AI impact assessments for new and existing products and features Develop and maintain privacy and AI governance policies, standards, and compliance programs Monitor legislative and regulatory developments and help shape Figma's legal strategy on privacy and AI matters We'd love to hear from you if you have: J.D. and active license to practice law in at least one U.S. jurisdiction 4+ years of experience advising on privacy and data protection matters at a technology company, law firm, or both Deep knowledge of privacy frameworks such as GDPR, CCPA/CPRA, and related global regulations Experience advising on AI, machine learning, or other emerging technology products and associated governance requirements Demonstrated ability to translate complex legal and regulatory requirements into practical guidance for business, product, and engineering teams While it's not required, it's an added plus if you also have: <li class="fo