Associate Paralegal, Privacy Full Time

GitLab is an open-core software company that develops the most comprehensive AI-powered DevSecOps Platform, used by more than 100,000 organizations. Our mission is to enable everyone to contribute to and co-create the software that powers our world. When everyone can contribute, consumers become contributors, significantly accelerating human progress. Our platform unites teams and organizations, breaking down barriers and redefining what’s possible in software development. Thanks to products like Duo Enterprise and Duo Agent Platform, customers get AI benefits at every stage of the SDLC.

The same principles built into our products are reflected in how our team works: we embrace AI as a core productivity multiplier, with all team members expected to incorporate AI into their daily workflows to drive efficiency, innovation, and impact. GitLab is where careers accelerate, innovation flourishes, and every voice is valued. Our high-performance culture is driven by our values and continuous knowledge exchange, enabling our team members to reach their full potential while collaborating with industry leaders to solve complex problems. Co-create the future with us as we build technology that transforms how the world develops software.

An overview of this role
As an Associate Paralegal, Privacy at GitLab, you’ll support our global data privacy program and help ensure we handle user and customer data in a lawful, transparent, and consistent way. You’ll manage complex data subject requests and respond to government and law enforcement inquiries, collaborating closely with support engineers and the Legal, Security, and Engineering teams. You’ll review vendor data processing agreements against GitLab’s privacy playbook, track and apply changes in global privacy regulations like the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA), and maintain clear records that support audits and assessments. In this role, you’ll contribute directly to GitLab’s commitment to privacy and data protection, helping teams across the company follow established procedures and uphold the trust of the people who rely on GitLab.

Some examples of our projects:

Managing responses to non-standard data subject requests and government production requests
Reviewing and flagging vendor processing agreements to ensure compliance with GitLab’s privacy policies

What you’ll do

• Collaborate with support engineers to draft clear, consistent responses to non-standard data subject requests under the General Data Protection
• Regulation (GDPR), California Consumer Privacy Act (CCPA), and other privacy regulations.
• Manage and coordinate responses to government and law enforcement requests for data, ensuring timely, accurate, and compliant production in line with GitLab’s policies.
• Review vendor data processing agreements to identify privacy and data protection issues, and escalate discrepancies against GitLab’s privacy playbook and standards.
• Follow established privacy playbooks and procedures to support compliance activities and ensure consistent handling of requests and reviews.
• Monitor developments in global privacy laws and regulations and help update internal processes, guidance, and templates as needed.
• Partner with Legal, Security, Engineering, and other cross-functional teams to integrate privacy requirements into business operations and product workflows.
• Maintain organized, detailed records of privacy-related activities, including requests, reviews, and decisions, and support internal audits or assessments.

What you’ll bring

• Experience working in privacy compliance, data protection, or legal operations in a technology, software, or similarly regulated environment.
• Foundational understanding of global privacy laws and frameworks, such as the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA).
• Familiarity with privacy management tools or platforms, with an interest in learning systems like OneTrust or similar solutions.
• Understanding of basic data security concepts and how they connect to privacy obligations and risk management.
• Ability to interpret and follow detailed playbooks and procedures with consistency and accuracy.
• Strong attention to detail and organizational skills to track and manage multiple privacy-related tasks, requests, and deadlines.
• Clear written and verbal communication skills to explain privacy concepts and collaborate with Legal, Security, Engineering, and other cross-functional teams.
• Openness to learning, with readiness to apply transferable skills from related legal, compliance, or operations roles and contribute in a distributed, asynchronous environment.

About the team
The Privacy team within Legal at GitLab supports and maintains GitLab’s global data privacy compliance and governance. We manage data subject requests, government and law enforcement inquiries, and vendor data processing agreements, and work to align our practices with regulations such as the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA). We are distributed across regions and collaborate asynchronously, partnering closely with Legal, Security, Engineering, Product, and Support to embed privacy requirements into GitLab’s platform and operations. Our current focus is on scaling clear, repeatable processes and playbooks for handling complex privacy requests while supporting GitLab’s commitment to transparency and data protection.

How GitLab will support you

• Benefits to support your health, finances, and well-being
• Flexible Paid Time Off
• Team Member Resource Groups
• Equity Compensation & Employee Stock Purchase Plan
• Growth and Development Fund
• Parental leave
• Home office support

Please note that we welcome interest from candidates with varying levels of experience; many successful candidates do not meet every single requirement. Additionally, studies have shown that people from underrepresented groups are less likely to apply to a job unless they meet every single qualification. If you’re excited about this role, please apply and allow our recruiters to assess your application.

Country Hiring Guidelines: GitLab hires new team members in countries around the world. All of our roles are remote, however some roles may carry specific location-based eligibility requirements. Our Talent Acquisition team can help answer any questions about location after starting the recruiting process.

Tagged as: legal