Counsel, Privacy, AI & Data Protection

Role Overview

• Provide legal leadership on AI governance and responsible adoption of AI/ML/LLMs, including risk-based reviews, internal controls, documentation, and oversight mechanisms (e.g., transparency, accountability, human oversight).
• Monitor and interpret AI legal and regulatory developments, and develop internal guidance/training aligned to best practices, frameworks, and evolving global and U.S. state automated decision-making laws.
• Partner with AI/Data teams to implement legal, technical, and operational requirements for AI solutions as regulations and enforcement evolve globally; support development/review of Responsible AI documentation.
• Advise on privacy and data protection laws and regulatory trends (e.g., U.S. state privacy laws, GDPR, sectoral requirements as applicable), and embed “privacy-by-design” into products and operations.
• Lead and/or oversee privacy impact assessments and data protection impact assessments, and maintain core privacy program artifacts (e.g., records of processing, DPIAs/PIAs).
• Partner with Marketing and digital teams on privacy requirements for cookies, pixels, SDKs, analytics/advertising technologies, and consent management practices.
• Provide legal support for cybersecurity programs, including incident response planning and execution, investigations, audits, and regulatory inquiries related to data practices.
• Advise on data management and security practices supporting infrastructure/software development and advanced analytics/AI use cases (financial services or other regulated environments as applicable).
• Draft, review, and negotiate data protection agreements, vendor and technology contracts, and privacy provisions; support procurement and vendor management processes.
• Conduct privacy and AI vendor diligence and governance reviews, including assessment of vendor controls and risk posture for data processing and AI capabilities.
• Maintain and update internal privacy/data governance policies; create external/customer-facing privacy documentation (e.g., FAQs, data sheets) to support transparency and trust.
• Drive training and awareness programs on privacy, cybersecurity, and AI governance; develop playbooks and practical guidance for cross-functional teams.
• Shape and execute a forward-looking roadmap for privacy and AI initiatives to support business growth and product expansion.

Requirements

• Juris Doctor (JD) from an accredited law school and active bar membership (or ability to obtain/maintain as required).
• 5+ years of relevant legal experience with a strong focus on privacy, data protection, cybersecurity, and AI governance (law firm and/or in-house).
• Hands-on experience building and operationalizing AI governance principles, controls, and documentation; comfort advising on AI/ML/LLMs and emerging AI regulation.
• Demonstrated experience advising cross-functionally and translating regulatory obligations into pragmatic business solutions.
• Strong drafting and negotiation skills for data-related and technology agreements, including vendor/customer contracting and privacy/security terms.

Tech Stack

• Cyber Security

Benefits

• Medical, Dental, Vision Insurance
• 401k, With Matching Contributions
• Short-Term/Long-Term Disability Insurance
• Health Savings Account (HSA)/Health Reimbursement Account (HRA) Options
• Paid Time Off (including sick, holiday, vacation, etc.)
• Tuition Reimbursement
• Growth Opportunities
• And more!