Job description

We are looking for a law graduate who writes because they want to, not because a brief demanded it. You will track privacy legislation across jurisdictions, translate it into content our customers can act on, and act as the internal check on the legal accuracy of everything we publish and ship. Part of the role is genuine legal work: reviewing our own agreements, supporting compliance queries from customers, and keeping our product claims defensible.

RESPONSIBILITIES

Monitor privacy and data protection developments globally, including GDPR, ePrivacy, CCPA and other US state laws, LGPD, PIPEDA, PDPA and emerging regulations, and flag what matters for CookieYes and our customers.
Write authoritative long-form content: regulation explainers, jurisdiction guides, compliance checklists, legal update posts and whitepapers.
Act as the legal accuracy reviewer for marketing and product content, with an agreed turnaround SLA so reviews never stall the pipeline. Nothing that makes a compliance claim should ship without your reading.
Structure that content to be found and cited by AI search, AI Overviews and answer engines, working with the SEO and AI search team on generative engine optimisation, schema and citation-worthy formatting.
Translate regulatory obligations into product requirements, working with product and engineering on how consent, records and disclosures need to behave.
Support customer-facing compliance queries escalated by sales and support, and build the internal reference material that reduces how often they need escalating.
Review and maintain our own legal documents, including the privacy policy, terms of service, DPAs and vendor agreements, with external counsel where required.
Prepare briefing notes for leadership when a regulatory change affects roadmap or positioning.
Represent CookieYes’s point of view publicly through bylined articles, webinars and industry commentary.

REQUIREMENTS

LLB or equivalent law degree from a recognised institution. Enrolment with a bar council is welcome but not required.
2+ years of relevant experience in a law firm, in-house legal team, compliance function or legal publishing role.
Demonstrable writing ability outside pleadings and contracts. Send us published work, a blog, a newsletter or a substantial piece written for a non-lawyer audience.
The instinct to write for a business owner rather than a bench. Accuracy without legalese.
Working familiarity with data protection law, or clear evidence you can master a regulatory area quickly and thoroughly.
Fluency with AI tools for research, drafting and summarisation, paired with the discipline to verify every citation, holding and date against the primary source before it reaches a draft.
Research discipline: you cite primary sources, you check whether guidance has been superseded, and you do not build an argument on a secondary summary.
Sound judgement about the line between explaining the law and giving legal advice, and the care to keep our content on the right side of it.

GOOD TO HAVE

A privacy certification such as CIPP/E, CIPP/US or CIPM, or the intent to pursue one, which we will support.
Prior experience at a SaaS, privacy tech or legal tech company.
Experience drafting or negotiating DPAs and SaaS agreements.
Comfort with SEO, GEO and how legal content performs in traditional search, AI search and AI Overviews.
Additional language ability relevant to EU jurisdictions.
Good understanding of, or familiarity with, major global privacy and data protection laws, including GDPR, CCPA, DPA, PDPA, UCPA, and related regulations.

Someone shared one job with you. ASAI keeps finding the rest.

Scored, not searched. Every role ranked against your actual profile.

Alerts as often as hourly. Reach new roles while the pile is still small.

Skill gaps, spelled out. See exactly which requirements you don't meet yet.

Verified jobs, only. Say no to ghost jobs. Your time deserves respect.