TRM Labs is seeking a Legal Counsel - Privacy to ensure compliance with global privacy laws and support product expansion. This fully remote role involves building a privacy program and collaborating with various teams.
TRM Labs provides AI-powered intelligence solutions that help public and private sector agencies investigate and disrupt crime. TRM's platforms enable investigators to trace illicit activity, build cases, and construct operating pictures of threat networks. Leading agencies and businesses worldwide rely on TRM to make the world safer and more secure.
Responsibilities
- Determine whether TRM can launch Orion in a new jurisdiction by owning the privacy analysis end-to-end — using AI to draft DPIAs and transfer assessments so decisions land in days, not weeks.
- Embed privacy-by-design into Orion's development lifecycle, partnering with Engineering to resolve data-flow and retention questions before they become launch blockers.
- Lead and respond to data subject rights requests (DSARs) in coordination with Engineering and Customer Success.
- Build and maintain the privacy program's core artifacts — records of processing, DPIA templates, and breach-response playbooks — using AI-assisted workflows so the program scales without adding headcount.
- Run first-pass review of data processing agreements with AI, then finalize positions, cutting turnaround time on customer and vendor DPAs.
- Design lawful cross-border data transfer mechanisms (SCCs, transfer impact assessments) that let Orion serve international customers with confidence.
- Stand up a self-service privacy-review intake, supported by AI triage, so routine questions are answered quickly and only genuinely novel risk reaches deep legal review.
- Support the CLO and AGC with clear, business-ready guidance that helps leadership make faster, better-informed decisions on privacy risk.
Requirements
- 4+ years of privacy and data-protection legal experience, with hands-on work applying GDPR and US state privacy laws to a technology product.
- Active US bar admission; JD from an ABA-accredited law school.
- Proven AI fluency: you use Claude, Gemini, or equivalent tools in your daily workflow and can design AI-assisted privacy processes — not just use AI for one-off research.
- Experience counseling Product and Engineering teams on privacy-by-design, DPIAs, and data flows.
- Familiarity with cross-border transfer mechanisms (SCCs, transfer impact assessments, adequacy analysis).
- A collaborative, business-minded approach: you explain privacy risk in plain terms and work with partners to find a path forward rather than defaulting to no.
- Comfort operating with ownership and limited oversight in a fast-moving environment.
Conditions
- Fully remote position.
- High transparency culture — program status and obligations are tracked in shared workspaces accessible to partner teams.
- Weekly Legal team sync for cross-functional coordination; regular 1:1s with the AGC for prioritization and privacy program advisory.