Back to jobs
New

Counsel – Privacy, Security & AI Office

London, England, United Kingdom; Madrid, Spain; Paris, Paris, France

Harness is the AI Software Delivery Platform company, led by technologist and entrepreneur Jyoti Bansal (founder of AppDynamics, acquired by Cisco for $3.7B). Harness has raised approximately $570M in funding and is valued at $5.5B, backed by leading investors including Goldman Sachs, Menlo Ventures, IVP, Unusual Ventures, Citi Ventures, and more. As AI accelerates code creation, the real bottleneck has shifted to everything after the code – testing, deployments, application security, reliability, compliance, and cost optimization. Harness brings AI and automation to this “outer loop,” helping teams ship software faster while maintaining security and governance throughout the entire software delivery lifecycle.

Powered by Harness AI and the Software Delivery Knowledge Graph, the Harness Platform applies deep context and intelligent automation across the software delivery lifecycle with governance and policy-driven controls embedded throughout the platform. 

Over the past year, Harness powered over 185M deployments, 82M builds, 18T flag evaluations, 8M security scans, 9.1B optimized tests, 3T protected API calls, and helped manage $2.8B in cloud spend — enabling customers like United Airlines, Morningstar, and Choice Hotels to accelerate releases by up to 75%, reduce cloud costs by up to 60%, and achieve 10x DevOps efficiency. 

With a global team across 26 offices and 25 countries, Harness is shaping the future of AI software delivery — and we’re looking for exceptional talent to help us move even faster.

Position Summary

We are seeking an experienced and strategic Counsel to join our Privacy, Security & AI (“PSAI”) Office. In this -l role, you will play a critical part in guiding our product and AI compliance, supporting global privacy and data protection strategy, and helping shape the company’s approach to responsible and ethical data use.

You’ll advise senior leadership, collaborate with cross-functional stakeholders, and help ensure that our data practices are aligned with global legal and regulatory obligations, including those emerging around AI governance and advanced technologies

About the role

AI

  • Support the development and implementation of the AI Governance Program
  • Draft and implement AI policies, procedures, and best practices for both internal use of AI and product development 
  • Lead internal awareness campaigns to foster a culture of responsible AI across the organization.
  • Support AI Use Case Intake Assessments 
  • Provide AI advice to key stakeholders (product, procurement)
  • Support customers queries and questionnaires

Product Compliance

  • Collaborate closely with product and engineering teams to evaluate and mitigate privacy and AI compliance risks during development and deployment.
  • Review and assess AI/ML use cases for compliance with legal and ethical standards, including EU AI Act, OECD AI Principles, and NIST AI RMF.
  • Contribute to development of governance frameworks for responsible AI, including fairness, explainability, and accountability controls.

Privacy & Data Protection Legal Strategy

  • Lead complex legal analysis and provide strategic privacy advice on global data protection laws (e.g., GDPR, CCPA/CPRA, LGPD, PIPEDA, APPI), with a main focus on US federal and state privacy and EU GDPR
  • Guide business and technical teams on lawful bases for processing, purpose limitation, transparency, and data minimization.
  • Evaluate and advise on complex personal data use cases, including sensitive data, automated decision-making, and biometric processing.
  • Implement best practices around privacy to ensure the competitive edge of the company 
  • Draft and review breach-related communications, including regulator and data subject notices.
  • Conduct privacy reviews for third-party vendors and tools to ensure alignment with internal standards and legal requirements.
  • Drive the development, maintenance, and enhancement of the company’s privacy compliance program.
  • Maintain and oversee updates to the Records of Processing Activities (ROPA), and ensure accountability documentation is current and complete.
  • Partner with security, compliance, and product teams to integrate privacy by design into internal processes and external-facing technologies.
  • Lead and advise on complex Privacy Impact Assessments (PIAs) and Data Protection Impact Assessments (DPIAs).
  • Oversee and conduct Transfer Impact Assessments (TIAs) to assess and document data transfer risks.
  • Manage Legitimate Interests Assessments (LIAs) and ensure robust justification and safeguards are in place.
  • Identify privacy and AI-related risks and recommend scalable mitigation strategies across the organization.

Audits, Monitoring & Regulatory Readiness

  • Support or lead the legal function in responding to privacy audits, regulator inquiries, and due diligence requests.
  • Prepare documentation, gap analyses, and remediation plans to ensure audit readiness.
  • Track and interpret global privacy and AI regulatory developments, and support internal implementation efforts.

About you

Required:

  • Qualified lawyer (active bar membership in at least one jurisdiction).
  • 1-3+ years of legal experience, with a focus on privacy, data protection, and technology law.
  • Deep understanding of GDPR, CCPA/CPRA, and global privacy frameworks.
  • Preferred experience with FedRamp, PCI DSS and ISO frameworks
  • Extensive experience with PIAs/DPIAs, TIAs, LIAs, and cross-border data transfer mechanisms.
  • Strong understanding of privacy issues in product development, data science, and AI applications.

Preferred:

  • CIPP/E, CIPP/US and AIGP
  • Direct experience working with or interpreting AI legal and regulatory frameworks (e.g., EU AI Act).
  • Strong negotiation skills, particularly in data protection clauses and international data transfer agreements.

Work Location

  • Remote within France, Spain, Germany, or the UK

 

 

Harness in the news:

All qualified applicants will receive consideration for employment without regard to race, color, religion, sex or national origin.

Note on Fraudulent Recruiting/Offers

We have become aware that there may be fraudulent recruiting attempts being made by people posing as representatives of Harness. These scams may involve fake job postings, unsolicited emails, or messages claiming to be from our recruiters or hiring managers. 

Please note, we do not ask for sensitive or financial information via chat, text, or social media, and any email communications will come from the domain @harness.io. Additionally, Harness will never ask for any payment, fee to be paid, or purchases to be made by a job applicant. All applicants are encouraged to apply directly to our open jobs via our website. Interviews are generally conducted via Zoom video conference unless the candidate requests other accommodations.

If you believe that you have been the target of an interview/offer scam by someone posing as a representative of Harness, please do not provide any personal or financial information and contact us immediately at security@harness.io. You can also find additional information about this type of scam and report any fraudulent employment offers via the Federal Trade Commission’s website (https://consumer.ftc.gov/articles/job-scams), or you can contact your local law enforcement agency.

Create a Job Alert

Interested in building your career at Harness ? Get future opportunities sent straight to your email.

Apply for this job

*

indicates a required field

Phone
Resume/CV*

Accepted file types: pdf, doc, docx, txt, rtf

Cover Letter

Accepted file types: pdf, doc, docx, txt, rtf


Select...

Voluntary Self-Identification

For government reporting purposes, we ask candidates to respond to the below self-identification survey. Completion of the form is entirely voluntary. Whatever your decision, it will not be considered in the hiring process or thereafter. Any information that you do provide will be recorded and maintained in a confidential file.

As set forth in Harness ’s Equal Employment Opportunity policy, we do not discriminate on the basis of any protected group status under any applicable law.

Select...
Select...
Race & Ethnicity Definitions

If you believe you belong to any of the categories of protected veterans listed below, please indicate by making the appropriate selection. As a government contractor subject to the Vietnam Era Veterans Readjustment Assistance Act (VEVRAA), we request this information in order to measure the effectiveness of the outreach and positive recruitment efforts we undertake pursuant to VEVRAA. Classification of protected categories is as follows:

A "disabled veteran" is one of the following: a veteran of the U.S. military, ground, naval or air service who is entitled to compensation (or who but for the receipt of military retired pay would be entitled to compensation) under laws administered by the Secretary of Veterans Affairs; or a person who was discharged or released from active duty because of a service-connected disability.

A "recently separated veteran" means any veteran during the three-year period beginning on the date of such veteran's discharge or release from active duty in the U.S. military, ground, naval, or air service.

An "active duty wartime or campaign badge veteran" means a veteran who served on active duty in the U.S. military, ground, naval or air service during a war, or in a campaign or expedition for which a campaign badge has been authorized under the laws administered by the Department of Defense.

An "Armed forces service medal veteran" means a veteran who, while serving on active duty in the U.S. military, ground, naval or air service, participated in a United States military operation for which an Armed Forces service medal was awarded pursuant to Executive Order 12985.

Select...

Voluntary Self-Identification of Disability

Form CC-305
Page 1 of 1
OMB Control Number 1250-0005
Expires 04/30/2026

Why are you being asked to complete this form?

We are a federal contractor or subcontractor. The law requires us to provide equal employment opportunity to qualified people with disabilities. We have a goal of having at least 7% of our workers as people with disabilities. The law says we must measure our progress towards this goal. To do this, we must ask applicants and employees if they have a disability or have ever had one. People can become disabled, so we need to ask this question at least every five years.

Completing this form is voluntary, and we hope that you will choose to do so. Your answer is confidential. No one who makes hiring decisions will see it. Your decision to complete the form and your answer will not harm you in any way. If you want to learn more about the law or this form, visit the U.S. Department of Labor’s Office of Federal Contract Compliance Programs (OFCCP) website at www.dol.gov/ofccp.

How do you know if you have a disability?

A disability is a condition that substantially limits one or more of your “major life activities.” If you have or have ever had such a condition, you are a person with a disability. Disabilities include, but are not limited to:

  • Alcohol or other substance use disorder (not currently using drugs illegally)
  • Autoimmune disorder, for example, lupus, fibromyalgia, rheumatoid arthritis, HIV/AIDS
  • Blind or low vision
  • Cancer (past or present)
  • Cardiovascular or heart disease
  • Celiac disease
  • Cerebral palsy
  • Deaf or serious difficulty hearing
  • Diabetes
  • Disfigurement, for example, disfigurement caused by burns, wounds, accidents, or congenital disorders
  • Epilepsy or other seizure disorder
  • Gastrointestinal disorders, for example, Crohn's Disease, irritable bowel syndrome
  • Intellectual or developmental disability
  • Mental health conditions, for example, depression, bipolar disorder, anxiety disorder, schizophrenia, PTSD
  • Missing limbs or partially missing limbs
  • Mobility impairment, benefiting from the use of a wheelchair, scooter, walker, leg brace(s) and/or other supports
  • Nervous system condition, for example, migraine headaches, Parkinson’s disease, multiple sclerosis (MS)
  • Neurodivergence, for example, attention-deficit/hyperactivity disorder (ADHD), autism spectrum disorder, dyslexia, dyspraxia, other learning disabilities
  • Partial or complete paralysis (any cause)
  • Pulmonary or respiratory conditions, for example, tuberculosis, asthma, emphysema
  • Short stature (dwarfism)
  • Traumatic brain injury
Select...

PUBLIC BURDEN STATEMENT: According to the Paperwork Reduction Act of 1995 no persons are required to respond to a collection of information unless such collection displays a valid OMB control number. This survey should take about 5 minutes to complete.