SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Bumble is seeking a Privacy Legal Counsel to join its Privacy Legal team, supporting the company's mission to create healthy and equitable relationships through responsible data practices. This role sits at the intersection of law, product, and operations, translating privacy requirements into practical, scalable solutions across the organization.
You will coordinate and support responses to personal data incidents, independently leading low-to-medium risk incident responses end-to-end with minimal oversight and contributing to more complex investigations through structured triage, documentation, and draft materials. You'll maintain accurate incident records and logs, ensuring clear documentation and follow-through on post-incident actions.
Key responsibilities include contributing to the delivery and continuous improvement of incident response playbooks, templates, and workflows; supporting execution of Bumble's global privacy compliance program (GDPR, UK data protection law, and US privacy frameworks); and owning privacy frameworks such as DPIA/ROPA standards while driving cross-functional adoption. You'll assist in maintaining and improving core GDPR artifacts including Records of Processing Activities (ROPA), Data Protection Impact Assessments (DPIAs), and Legitimate Interest Assessments (LIAs), with quality reviews and coordination with business teams.
You'll act as a subject matter contributor for operational privacy processes and improvements, partner cross-functionally on privacy-by-design efforts including data flow mapping and risk identification, and support preparation of draft responses to regulatory inquiries and data subject requests. The role emphasizes responsible use of AI tools to support research, documentation, and process optimization, applying human judgment to ensure accuracy, fairness, and compliance.
You'll work closely with Product, Engineering, InfoSec, Member Support, and other cross-functional teams in a fast-moving environment that values Respect, Curiosity, ownership, and continuous improvement.
REQUIREMENTS:
- Qualified attorney admitted to the bar and licensed in Texas
- 2-4+ years of experience in privacy, data protection, or compliance roles, ideally in technology or consumer-focused environments (candidates with alternative backgrounds demonstrating equivalent skills are welcome)
- Strong working knowledge of GDPR, UK GDPR, and US privacy laws, with curiosity for emerging global frameworks
- Hands-on experience supporting operational privacy activities such as incident response, DPIAs, LIAs, vendor assessments, or data mapping
- Ability to translate complex privacy concepts into clear, practical guidance, knowing when to escalate to legal counsel
- Strong drafting and communication skills with attention to detail across policies, playbooks, and stakeholder materials
- Comfortable collaborating across Product, Engineering, InfoSec, Marketing, Member Support, and People teams
- Demonstrates ownership, follows work through from insight to impact, and adapts with an agile mindset
- Experience using AI tools to enhance research, drafting, and workflow efficiency, with a responsible and inclusive approach
