Ibotta is seeking a Privacy Lawyer to join our innovative team and contribute to our mission to Make Every Purchase Rewarding. In this role, reporting to the Chief Legal Officer, you’ll provide expert guidance on data privacy, drive compliance across our global operations, and advise on global privacy and data protection matters. You’ll also help develop compliance strategies and support cross-functional teams in building privacy-first solutions.

This position is located in Denver, Colorado as a hybrid position requiring 3 days in office (Tuesday, Wednesday, and Thursday). Candidates must live in the United States.

What you will be doing:

Advise on privacy and data protection laws and regulations, including GDPR, CCPA/CPRA, Colorado Privacy Act, FTC Act, ePrivacy Directive, and other global frameworks.
Draft and negotiate data processing agreements (DPAs), privacy terms, and contractual provisions related to data acquisition, use, licensing, and transfer.
Lead and support privacy impact assessments (PIAs), data protection impact assessments (DPIAs), and record-keeping obligations.
Partner with product, engineering, and security teams to ensure products are designed and maintained in compliance with privacy laws.
Develop and maintain internal policies, procedures, and training programs related to data privacy.
Develop and maintain external privacy notices, policies, and other privacy-related regulatory disclosures.
Monitor regulatory developments and guide the company’s response to new and evolving data protection laws.
Support incident response and breach notification processes as needed.
Liaise with external counsel and regulators, as appropriate.
Embrace and uphold Ibotta’s Core Values: Integrity, Boldness, Ownership, Teamwork, Transparency, & A good idea can come from anywhere

What we are looking for:

5+ years of experience practicing privacy and data protection law, ideally with a combination of in-house and law firm experience.
Juris Doctor (JD) from an accredited law school and active membership in good standing with at least one U.S. state bar (or equivalent international qualification).
In-depth knowledge of global privacy laws and regulatory trends, with an emphasis on U.S. privacy laws.
Extensive understanding of how privacy impacts technology, digital products, and business operations.
Exceptional analytical, communication, and organizational skills.
Ability to work independently and collaboratively in a fast-paced, dynamic environment.
CIPP/E, CIPP/US, or similar certification preferred.
Experience working in the tech or SaaS industry, preferably on consumer-facing products.
Familiarity with AI and machine learning privacy considerations.
Knowledge of cybersecurity frameworks and standards.

About Ibotta ("I bought a...")

Ibotta (NYSE: IBTA) is a leading performance marketing platform allowing brands to deliver digital promotions to over 200 million consumers through a network of publishers called the Ibotta Performance Network (IPN). The IPN allows marketers to influence what people buy, and where and how often they shop – all while paying only when their campaigns directly result in a sale. American shoppers have earned over $1.8 billion through the IPN since 2012. The largest tech IPO in history to come out of Colorado, Ibotta is headquartered in Denver, and is continually listed as a top place to work by The Denver Post and Inc. Magazine.

Additional Details:

This position is located in Denver, CO and includes competitive pay, flexible time off, benefits package (including medical, dental, vision), Lifestyle Spending Account, Employee Stock Purchase Program, and 401k match. Denver office perks include paid parking, snacks and occasional meals.
Base compensation range: $165,000 - $182,000. Equity is included in the overall compensation package. This compensation range is specific to the United States labor market and may be adjusted based on actual experience. Total compensation for this role also includes a variable component in addition to base salary.
Ibotta is an Equal Opportunity Employer. Ibotta’s employment decisions are made without regard of race, color, religion, national origin, age, sex, marital status, ancestry, physical or mental disability, veteran status, gender identity, sexual orientation, or any other legally protected status.
Applicants must be currently authorized to work in the United States on a full-time basis.
For the security of our employees and the business, all employees are responsible for the secure handling of data in accordance with our security policies, identifying and reporting phishing attempts, as well as reporting security incidents to the proper channels

Recruiting Agency Notice

Ibotta does not accept agency resumes and is not responsible for any fees related to unsolicited resumes. Please do not forward resumes to any Ibotta employees.

#BI-Hybrid

Ibotta

New Jobs

Privacy Lawyer