Privacy & Product Counsel

About Hilbert

Hilbert is a data science-first growth infrastructure that tells B2C teams what their customers are about to do, what is actually moving revenue, and which action to take next. Agentic by design, Hilbert compresses decisions that used to take months into minutes.

We work with Fortune 500 enterprises, category-defining consumer brands, and AI-native companies redefining how software gets built. Hilbert is Series A, backed by a16z.

Position Overview

You'll work directly with the founding team and across product, engineering, and GTM to build and run Hilbert's privacy program end-to-end - while also owning the product and commercial legal work that comes with selling an agentic AI platform into enterprise accounts.

The environment is high-autonomy and high-ambiguity - new data types, new customer environments, and new AI capabilities show up faster than settled law does.

What you'll do

Privacy Program

• Design, build, and run Hilbert's privacy program - policies, data mapping, retention, and vendor/subprocessor management - from the ground up, covering both US and UK/EU entities and data flows
• Advise product and engineering on privacy-by-design for agentic workflows: what data an agent can access, retain, infer, or act on, and how that's documented and defensible under whichever regime applies
• Own compliance posture across CCPA/CPRA and the US state privacy patchwork, UK GDPR/DPA 2018, and EU GDPR, and track how state, federal, UK, and EU AI-specific rules are developing
• Build and maintain data processing agreements, international data transfer mechanisms (SCCs, UK IDTA/Addendum), and subprocessor frameworks that scale across enterprise customers without a bespoke redline every time

Product & Commercial Counsel

• Review and negotiate enterprise customer contracts, DPAs, and security addenda across US and UK/EU counterparties, working closely with sales to keep deals moving without compromising the company's data commitments
• Advise product on how new agentic features get built, marketed, and disclosed — including where an AI decision needs a human-in-the-loop checkpoint for legal or trust reasons
• Partner with security on incident response, breach notification obligations, and customer-facing security representations across jurisdictions
• Be the primary point of contact for enterprise customers' legal, security, and procurement teams when they ask how Hilbert's AI handles their data

Who thrives in the role

The right person in this role is quick to turn regulatory nuance into a product decision and show up with both engineers and enterprise counterparts.

The profile:

• You have 6–7 years of PQE in privacy and product/commercial counsel, ideally split between in-house work at a data-intensive or AI company and enterprise contract negotiation.
• You're genuinely fluent across US, UK, and EU privacy law — CCPA/CPRA and the state patchwork, UK GDPR/DPA 2018, and EU GDPR.
• You think like a product person, not just a lawyer. You'd rather sit in a design review and shape a data flow before it's built than redline it after.
• You've negotiated enterprise DPAs, security addenda, and cross-border transfer mechanisms directly.
• You're a genuine generalist, not just a specialist who's willing to help out.
• You communicate with clarity and conviction. You can explain a data-retention tradeoff to a founder, hold your ground with an enterprise customer's outside counsel, and walk an engineer through why a feature needs a consent gate — all in the same day.
• You take ownership. There's no one to hand this to. If the privacy program has a gap, you close it. If a deal is stuck on a legal term, you find the path through.
• You move at startup speed. Deals close fast, product ships fast, and you're available and responsive without needing a legal-ops process to get there.

Hilbert is an Equal Opportunity Employer. We are committed to building a diverse team and an inclusive culture, and we welcome applicants of all backgrounds. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, gender identity or expression, sexual orientation, national origin, age, disability, veteran status, or any other status protected by applicable law.