The Role
Monitor global privacy regulations and translate them into accessible legal content, compliance guidance, and product requirements. Review marketing, product, and legal materials for accuracy; support customer compliance questions; maintain privacy policies, terms, DPAs, and vendor agreements; and brief leadership on regulatory changes. The role also involves SEO and AI-search optimization, public thought leadership, and collaboration with product, engineering, sales, support, and external counsel.
Summary Generated by Built In
We are looking for a law graduate who writes because they want to, not because a brief demanded it. You will track privacy legislation across jurisdictions, translate it into content our customers can act on, and act as the internal check on the legal accuracy of everything we publish and ship. Part of the role is genuine legal work: reviewing our own agreements, supporting compliance queries from customers, and keeping our product claims defensible.
RESPONSIBILITIES
- Monitor privacy and data protection developments globally, including GDPR, ePrivacy, CCPA and other US state laws, LGPD, PIPEDA, PDPA and emerging regulations, and flag what matters for CookieYes and our customers.
- Write authoritative long-form content: regulation explainers, jurisdiction guides, compliance checklists, legal update posts and whitepapers.
- Act as the legal accuracy reviewer for marketing and product content, with an agreed turnaround SLA so reviews never stall the pipeline. Nothing that makes a compliance claim should ship without your reading.
- Structure that content to be found and cited by AI search, AI Overviews and answer engines, working with the SEO and AI search team on generative engine optimisation, schema and citation-worthy formatting.
- Translate regulatory obligations into product requirements, working with product and engineering on how consent, records and disclosures need to behave.
- Support customer-facing compliance queries escalated by sales and support, and build the internal reference material that reduces how often they need escalating.
- Review and maintain our own legal documents, including the privacy policy, terms of service, DPAs and vendor agreements, with external counsel where required.
- Prepare briefing notes for leadership when a regulatory change affects roadmap or positioning.
- Represent CookieYes’s point of view publicly through bylined articles, webinars and industry commentary.
REQUIREMENTS
- LLB or equivalent law degree from a recognised institution. Enrolment with a bar council is welcome but not required.
- 2+ years of relevant experience in a law firm, in-house legal team, compliance function or legal publishing role.
- Demonstrable writing ability outside pleadings and contracts. Send us published work, a blog, a newsletter or a substantial piece written for a non-lawyer audience.
- The instinct to write for a business owner rather than a bench. Accuracy without legalese.
- Working familiarity with data protection law, or clear evidence you can master a regulatory area quickly and thoroughly.
- Fluency with AI tools for research, drafting and summarisation, paired with the discipline to verify every citation, holding and date against the primary source before it reaches a draft.
- Research discipline: you cite primary sources, you check whether guidance has been superseded, and you do not build an argument on a secondary summary.
- Sound judgement about the line between explaining the law and giving legal advice, and the care to keep our content on the right side of it.
GOOD TO HAVE
- A privacy certification such as CIPP/E, CIPP/US or CIPM, or the intent to pursue one, which we will support.
- Prior experience at a SaaS, privacy tech or legal tech company.
- Experience drafting or negotiating DPAs and SaaS agreements.
- Comfort with SEO, GEO and how legal content performs in traditional search, AI search and AI Overviews.
- Additional language ability relevant to EU jurisdictions.
- Good understanding of, or familiarity with, major global privacy and data protection laws, including GDPR, CCPA, DPA, PDPA, UCPA, and related regulations.
Skills Required
- LLB or equivalent law degree from a recognized institution
- At least 2 years of relevant experience in a law firm, in-house legal team, compliance function, or legal publishing role
- Demonstrable writing ability outside pleadings and contracts, such as published work, a blog, newsletter, or substantial non-lawyer content
- Working familiarity with data protection law, or demonstrated ability to quickly master regulatory areas
- Fluency with AI tools for research, drafting, and summarization, with ability to verify citations against primary sources
- Strong legal research discipline, including checking primary sources and superseded guidance
- Sound judgment distinguishing legal explanation from legal advice
- Bar council enrollment
- Privacy certification such as CIPP/E, CIPP/US, or CIPM
- Experience at a SaaS, privacy technology, or legal technology company
- Experience drafting or negotiating DPAs and SaaS agreements
- Comfort with SEO, GEO, traditional search, AI search, and AI Overviews
- Additional language ability relevant to EU jurisdictions
- Familiarity with major global privacy and data protection laws, including GDPR, CCPA, DPA, PDPA, and UCPA
Am I A Good Fit?
Get Personalized Job Insights.
Our AI-powered fit analysis compares your resume with a job listing so you know if your skills & experience align.
Success! Refresh the page to see how your skills align with this role.
The Company
What We Do
Mozilor is a technology company that builds products to simplify work. Founded in 2017, it develops innovative product lines including CookieYes, WebToffee, and WebYes. Its solutions help create transformative customer experiences for more than 1.5 million websites, serving organizations from major brands such as Toyota and Reuters to small businesses and startups. The company is also a leader in global privacy and cookie-compliance technology.
