Senior Privacy Legal Counsel
Yandex is seeking a Privacy Legal Counsel to advise on global data protection and privacy matters (not including Russia and Belarus). In this role, you’ll support the development and launch of digital products across multiple jurisdictions, ensuring compliance with privacy regulations.
You’ll work alongside a team of privacy and AI experts and provide strategic legal guidance, manage regulatory risks, and help shape internal privacy practices across global markets.
This position is suited for a legal professional with strong expertise in privacy law and a keen interest in emerging technologies.
Tasks that await you
Compliance and risk management
You will serve as a key member of the privacy team, acting as a legal expert on global data protection regulations. You will advise on applicable privacy laws, including GDPR, frameworks across Europe, Africa, Asia, Latin America, and post-Soviet states, and monitor developments in emerging areas such as AI regulation, including the EU AI Act. You will also track legislative changes and case law, drafting legal opinions and guidance on proposed regulations. Additionally, you will design and implement privacy compliance programs tailored to the company’s global operations, and assess products, services, and business processes to ensure alignment with global privacy standards. You will be responsible for supporting the launch of innovative services by conducting comparative legal research, identifying compliance requirements, and recommending appropriate strategies. Finally, you will carry out privacy risk assessments (TIAs, LIAs, DPIAs, and conformity assessments) and develop risk mitigation strategies, including oversight of cross-border data transfer compliance and local data storage obligations.
You will serve as a key member of the privacy team, acting as a legal expert on global data protection regulations. You will advise on applicable privacy laws, including GDPR, frameworks across Europe, Africa, Asia, Latin America, and post-Soviet states, and monitor developments in emerging areas such as AI regulation, including the EU AI Act. You will also track legislative changes and case law, drafting legal opinions and guidance on proposed regulations. Additionally, you will design and implement privacy compliance programs tailored to the company’s global operations, and assess products, services, and business processes to ensure alignment with global privacy standards. You will be responsible for supporting the launch of innovative services by conducting comparative legal research, identifying compliance requirements, and recommending appropriate strategies. Finally, you will carry out privacy risk assessments (TIAs, LIAs, DPIAs, and conformity assessments) and develop risk mitigation strategies, including oversight of cross-border data transfer compliance and local data storage obligations.
Policy development and implementation
You will draft, review, and update core privacy documents, including policies, notices, data processing agreements, standard contractual clauses, and cross-border transfer arrangements. You will also ensure that all internal policies reflect current legal requirements and best industry practices. Additionally, you will work closely with technical teams to make sure privacy procedures align with operational realities and are effectively implemented across business processes.
Legal response
You will lead the legal response to data privacy incidents, including breaches, and handle regulatory notifications, documentation, and stakeholder communications. You will also provide guidance in managing privacy-related disputes and regulatory enforcement actions. Additionally, you will coordinate with regulators, prepare formal legal positions, and issue high-quality legal opinions where needed.
Strategic advisory
You will collaborate with product development teams to embed privacy-by-design principles into IT systems and AI technologies. You will also advise on the lawful use, storage, processing, and monetization of data in accordance with global legal frameworks. Additionally, you will promote the ethical and responsible application of AI, supporting genuine and legally sound digital innovation.
Training and awareness
You will promote a culture of privacy awareness and strengthen AI literacy across the organization. You will also develop and deliver training programs on privacy regulations and internal compliance practices. Finally, you will create and maintain internal resources such as knowledge bases and reference materials on privacy and AI governance.
We expect that you
- Have deep expertise in global privacy regulations and frameworks (GDPR, Council of Europe Convention 108, UK GDPR), including key court rulings (CJEU, UK Supreme Court/House of Lords) and guidance from data protection authorities (EDPB, WP29, ICO, CNIL)
- Possess strong analytical skills to solve complex legal problems related to digital information, data technologies, and AI
- Have excellent proficiency in English (spoken and written), as this will be your primary working language. Interviews will be conducted in English. Fluency in one or more additional languages—especially French, Spanish, Portuguese, Arabic, or Turkic languages—is a significant advantage. Knowledge of Serbian, Romanian, Georgian, Armenian, Azerbaijani, Uzbek, Kazakh, or Kyrgyz is encouraged
- Have exceptional communication skills and can clearly explain legal concepts to non-legal stakeholders
- Possess solid technical awareness and the ability to address legal issues related to emerging technologies such as AI and cloud computing
- Are familiar with smart, AI-driven technologies and automation tools, and are willing to implement and regularly use advanced tools in day-to-day work
- Excel in legal drafting and are proficient in the British legal drafting tradition
Preferred qualifications
- Hold a law degree such as an LLB (Bachelor of Laws) or equivalent (or higher) and are admitted to practice law in at least one jurisdiction
- Have 3+ years of professional experience in privacy law, ideally within multinational and technology-intensive environments
- Hold professional certifications such as CIPP/E, CIPM, or AIGP
Benefits
1
Health
2
Growth
3
Sport
4
And more
Enhanced medical insurance begins from your first month at Yandex. It covers health care services at clinics and hospitals, whether for emergency care, surgeries, routine visits in your home country or abroad, medical tests and diagnostics, dental care, accident insurance, etc.
Additionally:
- Corporate insurance plans for family members (children and spouses) on special terms.
- Mental health programs.
At Yandex, we have everything you need for continuous growth and learning: an internal educational platform, mentoring, and programs for both beginners and experienced leaders.
We also cover the cost of attending industry conferences — both as a speaker and as a participant.
Moreover, at Yandex, we have internal projects where our employees share their expertise, discuss complex topics, and analyze their project cases.
At Yandex's big offices, we have our own fully equipped gyms. There, you can work out independently or with a trainer.
Additionally:
- Free online fitness classes.
- Additional discounts at fitness clubs and/or other fitness providers.
- Reimbursement of sports competitions.
- Corporate sport form for official sports competitions.
At Yandex, we promote health and fitness and have sports clubs and communities. You are welcome to join the existing teams or groups or create your own.
You can join existing teams or create your own.
Flexible schedule
We don't have a set start and end time for the workday — work when it's convenient for you and your team.
Hybrid format
Work where it's most convenient for you — for example, part of the week from the office and part from home.
Everything for children
Medical Insurance plans, kids' days at the office, gifts for newborns.
Wed Aug 07 2024 14:43:03 GMT+0300 (Moscow Standard Time)
