Legal Counsel Specialist at Bumbleinc

Source: Bumbleinc’s job board on Ashby, checked today.

Written by the listing’s owner or source, not by Openpath.

INTRODUCTION TO ROLE & TEAM At Bumble, our mission is to create a world where all relationships are healthy and equitable. That starts with trust — and trust begins with how we protect people’s data. As part of our Privacy Legal team, you’ll help safeguard the experiences of millions of people by embedding thoughtful, responsible data practices into everything we build. This role sits at the intersection of law, product, and operations, translating privacy requirements into practical, scalable solutions that empower teams across Bumble. You’ll contribute to a global privacy program that supports innovation while upholding our responsibility to members and communities. You’ll work closely with Product, Engineering, InfoSec, and Member Support to operationalize privacy-by-design and respond to evolving regulatory expectations. Along the way, you’ll role model Bumble values such as Respect and Curiosity — approaching complex challenges with care, accountability, and a drive to continuously improve how we work, including through the thoughtful use of AI. WHAT YOU’LL DO - Coordinate and support responses to personal data incidents, Independently leading low–medium risk incident responses end-to-end with minimal oversight and contributing to more complex investigations through structured triage, documentation, and draft materials - Maintain accurate incident records and logs, ensuring clear documentation and follow-through across post-incident actions - Contribute to the delivery and continuous improvement of incident response playbooks, templates, and workflows, helping teams understand their roles and obligations - Support the execution of Bumble’s global privacy compliance programme, including GDPR, UK data protection law, and US privacy frameworks, translating requirements into operational practices - Owning privacy frameworks (e.g. DPIA/ROPA standards) and driving cross-functional adoption - Assist in maintaining and improving core GDPR artifacts such as Records of Processing Activities (ROPA), Data Protection Impact Assessments (DPIAs), and Legitimate Interest Assessments (LIAs), including quality reviews and coordination with business teams - Acting as a go-to subject matter contributor for operational privacy processes and improvements - Partner cross-functionally to support privacy-by-design efforts, including data flow mapping, documenting safeguards, and identifying risks for escalation - Support preparation of draft responses to regulatory inquiries and data subject requests, coordinating inputs and tracking deadlines across stakeholders - Use AI tools responsibly to support research, first-draft documentation, and process optimisation, applying human judgment to ensure accuracy, fairness, and compliance ABOUT YOU - Qualified attorney admitted to the bar and licensed in Texas. …