Senior Counsel, Privacy and Regulatory

<div class="content-intro"><p>Fastly helps people stay better connected with the things they love. Fastly’s edge cloud platform enables customers to create great digital experiences quickly, securely, and reliably by processing, serving, and securing our customers’ applications as close to their end-users as possible — at the edge of the Internet. The platform is designed to take advantage of the modern internet, to be programmable, and to support agile software development. Fastly’s customers include many of the world’s most prominent companies, including GitHub, Yelp, Paramount, and JetBlue.</p> <p>We're building a more trustworthy Internet. Come join us.</p></div><p><strong>Posting Open Date: </strong>6/22/26</p> <p><strong>Anticipated Posting Close Date*: </strong>8/22/26</p> <p><em>*Job posting may close early due to the volume of applicants.</em></p> <p><strong>Senior Privacy and Regulatory Counsel</strong></p> <p>We are looking for a Senior Privacy and Regulatory<strong> </strong>Counsel to join our Legal team. The person will lead our privacy program and provide legal guidance around artificial intelligence, data protection, and other emerging regulatory topics. This is a great opportunity for a thoughtful, pragmatic, and collaborative attorney with strong business instincts who wants to help shape innovative edge cloud technologies. We are seeking candidates who value working on a strong and diverse team and want to contribute to creating a welcoming, inclusive and supportive environment. This position reports to the Assistant General Counsel leading the Product, Technology, and Regulatory team, and will be based out of one of our offices with a preference for San Francisco, CA.</p> <p><strong>What You'll Do:</strong></p> <ul> <li><strong>Domain Leadership:</strong> Architect, scale, and lead a global privacy program, managing stakeholder engagement across the company</li> <li><strong>Regulatory Strategy:</strong> Manage compliance strategy for emerging regulatory and technical issues related to cutting-edge products and new jurisdictions, including evolving cybersecurity, critical infrastructure, and AI regulations (e.g., NIS2, CRA, ISP-specific frameworks, global privacy laws)</li> <li><strong>Policy Management:</strong> Design and drive internal company policies, external assets, and sales collateral addressing global privacy, data protection, and other regulatory frameworks (e.g., GDPR, EU Data Act, EU AI Act)</li> <li><strong>Regulator Engagement:</strong> Respond to regulatory inquiries and investigations, and collaborate with outside counsel where specialized jurisdictional expertise is required</li> <li><strong>Product Counseling:</strong> Partner closely with product and engineering teams to provide end-to-end legal guidance on product and feature development, incorporating "privacy by design" and similar principles</li> <li><strong>Commercial Negotiations:</strong> Serve as our subject matter expert on privacy and other relevant regulations in complex customer, partner and vendor negotiations, including reviewing, drafting and negotiating agreements in collaboration with other Legal and business partners&nbsp;</li> <li><strong>Talent Support:</strong> Partner with our People team to advise on global employee data protection, workforce privacy initiatives, and talent-related privacy matters.</li> <li><strong>Incident Management:</strong> Independently manage the legal response to privacy-related incidents</li> <li><strong>Process &amp; Training:</strong> Draft and maintain policies, playbooks, checklists, FAQs, and training materials to improve process and streamline stakeholder engagement on privacy and regulatory matters</li> <li><strong>Operational Support:</strong> Oversee and conduct Data Protection Impact Assessments (DPIAs), maintain Records of Processing Activities (RoPAs), and support audits, law enforcement requests, and platform-abuse process and policy</li> </ul> <p><strong>What We're Looking For:&nbsp;</strong></p> <ul> <li><strong>Education &amp; Credentials:</strong> JD from a respected institution and membership in good standing with at least one U.S. state bar</li> <li><strong>Experience:</strong> 8+ years of relevant legal experience, with significant in-house experience advising on global privacy and regulatory matters at a technology company, especially in the cloud or SaaS space</li> <li><strong>Regulatory Exp