Senior Legal Operations & Privacy Specialist

We are looking for an organized, detail-oriented Senior Legal Operations & Privacy Specialist to join our growing, distributed team at Coforma.
As our Senior Legal Operations & Privacy Specialist, you will bridge the gap between substantive legal support and operational excellence. One day you’ll be digging into evolving state or national privacy regulations; the next, you’ll optimize our contract management systems or help shape our data governance framework. This is a high-impact role designed for a proactive problem-solver who can keep our legal machine running smoothly while protecting our organization’s data ecosystem.
If you’re passionate about improving lives through digital products and services, Coforma is a great company for you.
$120,000 to $160,000 Annual Salary + Benefits + Growth Potential
Placement within this range will be based on the competency level of the candidate. To honor our company-wide equitable pay system, the posted salary range and corresponding tier salaries are non-negotiable.
This is a US-based remote position open to applicants in the states listed below with a strong preference for applicants currently residing in Florida, Georgia, or the Greater Washington DC / DMV metro area. Occasional travel for on-site meetings at our headquarters in North Bethesda, MD will be required.

To ensure we remain compliant with all state, county, and local employment and tax regulations, applicants must currently reside in one of the following states to be considered for employment with Coforma. This list will be updated periodically as our PeopleOps team works to open up hiring in additional states.

• Arizona
• California
• District of Columbia
• Florida
• Georgia
• Idaho
• Illinois
• Maryland
• Massachusetts
• Montana
• Nevada
• New Jersey
• New York
• North Carolina
• Oregon
• South Carolina
• Tennessee
• Texas
• Virginia
• Washington
• Wisconsin

What You’ll Do (Key Responsibilities)

Legal Research and Paralegal Support (50%):

• Expert Legal Research: Conduct comprehensive legal research on laws impacting digital products, including global data privacy laws and regulations (e.g., GDPR, CCPA/CPRA, HIPAA, and emerging US state laws) and translate complex requirements into practical business guidance.
• Contractual & Regulatory Support: Take the first pass at drafting, reviewing, and mitigating risk for MSAs, Terms of Service, and associated agreements and policies, including Data Processing Agreements (DPAs), Partner Agreements, and Business Associate Agreements. 
• Regulatory Monitoring: Act as the legal team’s radar, monitoring legislative updates, enforcement trends, and security standards to ensure the company remains ahead of compliance curves.
• Incident Response Support: Assist counsel with the legal administrative workflows involved in data incident response, investigation, and reporting obligations.

Legal Operations and Technology (30%):

• Workflow Optimization: Evaluate, design, and implement scalable processes for the legal team, with a heavy emphasis on maintaining ticketing systems, privacy impact assessments (PIAs), and intake workflows.
• Legal Tech Stack Management: Serve as the designer, administrator, and/or subject matter expert for legal tools and Contract Lifecycle Management (CLM) systems.
• Metrics & Reporting: Define, track, and report on key operational metrics for the legal department to demonstrate value and identify bottlenecks.
• Vendor & Budget Support: Assist in managing outside counsel and vendor relationships, including billing, implementation, and tracking spend against the budget.
• Compliance Support: Assist with preparation and distribution of annual questionnaires and feedback surveys for compliance trainings, maintain or iterate on compliance policies and processes, and manage the organization’s compliance calendar.
• Knowledge Management: Standardize legal knowledge and communications so the information is preserved, accessible, and current.

Data & Corporate Governance (20%):

• Data Governance Frameworks: Partner with IT, Security, and Product teams to create and maintain the company’s data mapping, data inventory, and records retention schedules.
• Policy Management: Oversee the lifecycle of internal and external compliance policies, ensuring regular reviews, updates, and organization-wide training alignment.
• Corporate Governance and Records: Provide research, project management, and regulatory filing support for broader corporate governance efforts, including maintaining secure repositories of corporate records, consents, and compliance certifications.
• Insurance Program Support: Facilitate claims reporting to insurance providers and assist with insurance renewals.

In Your First 30 Days, You Will:

• Complete Coforma new hire orientation and familiarize yourself with the Contracts & Legal Onboarding Guide, tools and current workflows
• Meet key stakeholders and external counterparts within the Innovation team
• Confirm proper access to internal and external systems, G Drive folders, and attend regular meetings
• Train on internal tools such as Confluence, Lattice, Jira, Google Docs / Sheets, and Unanet
• Create a skeleton file for a Contracts & Legal Department manual

After 60 Days:

• Develop a project plan for completing the Legal Department Manual 
• Begin regular debriefs of important changes in regulations 
• Handoff initial agreement and policy reviews related to the Innovation team to the General Counsel
• Develop a RACI chart for corporate governance and records work and assume responsibilities for the pieces of work that your role owns
• Begin review of critical insurance documents such as contracts, policies, etc. 
• Identify skills or knowledge gaps and establish a professional development plan for yourself in partnership with your manager

After 90 Days:

• Develop the Insurance Program portion of the Contracts & Legal Manual and establish a communications tracker
• Research and document ideas (ideally a plan) for outside counsel spend management and review and suggest improvements for the invoice review process
• Present workflow improvements and Service Level Agreements for Legal Helpdesk tickets

Who You Are and What You Know (Knowledge and Experience Requirements)

• A minimum of 4 years of experience working as a paralegal, legal operations professional, or hybrid of both (preferably within a SaaS company operating in a highly regulated environment).
• High Trust: Display discernment in order to operate with a high level of discretion, confidentiality, and legal acumen while remaining a cross-functional collaborator for less sensitive business initiatives.
• Privacy Expertise: Demonstrated expertise in data privacy and security frameworks. You know your way around a DPA and understand how data flows through an organization.
• Research Skills: Exceptional legal research capabilities using tools like Westlaw, LexisNexis, or relevant regulatory databases.
• Corporate Entity Management: Proven expertise in US entity management and corporate administrative and compliance work with deep experience with entity structuring and transactions.
• Tech-Savvy Mindset: Experience designing and implementing legal operations tech (CLM, outside counsel spend management, privacy compliance software and systems) and strong familiarity with standard enterprise tools (Slack, Jira, Google Workspace).
• Communication: Ability to distill highly dense legal information into clear, actionable advice for non-legal stakeholders.
• Comfort with Ambiguity: Comfortable working in an environment where priorities shift and processes are designed for responsiveness, not rigid adherence.
• Full-time resident of the contiguous United States (must be legally authorized to work in the US now and in the future without sponsorship).

Preferred Qualifications and Experience:

• ABA-approved Paralegal Certificate or JD
• Governance Background: Direct experience establishing information governance, data lifecycle management, or supporting corporate board governance.
• Relevant certifications such as IAPP Certifications (CIPP/US, CIPP/E, CIPM), Legal Operations certifications (CLOC), HCCA Certifications (CHPC), and/or Certified Public Notary

Other

• Internet: Will prioritize and maintain access to strong, reliable internet for the remote nature of our work, except when on vacation or holiday.
• Security: Will keep the highest security practices to ensure privacy and security of Coforma and client information, given the nature of our work, even when on vacation.
• Travel Flexibility: On request and with advanced notice, will attend in-person events such as meetings, workshops, and trainings as assigned for projects that require it.
• Brand Representation: Will represent Coforma professionally and sincerely, modeling our Company Values in all interactions.