Assistant General Counsel, Compliance & Data Privacy

Overview

This role involves serving as Assistant General Counsel, Compliance & Data Privacy, responsible for leading enterprise compliance programs and advising on complex regulatory, investigation, and incident response matters within a highly regulated, global environment. The position acts as the primary legal advisor to the Compliance function and collaborates closely with business leaders to identify, mitigate, and manage compliance risks in accordance with applicable laws, regulations, and internal policies.

Reporting to the Vice President and Deputy General Counsel based in the UK, this role includes managing and supervising an attorney supporting legal compliance matters located in Providence, Rhode Island.

Responsibilities

• Lead legal compliance programs including anticorruption, data privacy, antitrust, anti-money laundering, internal investigations, government relations, and industry-specific regulations.
• Conduct risk assessments, training, investigations, remediation, continuous improvement, and develop and maintain relevant policies and procedures.
• Serve as the central coordinator for compliance-related legal advice across the organization.
• Advise business leaders and the Compliance team on applicable laws, regulations, and regulatory expectations.
• Translate legal requirements into practical guidance to support compliance program design and execution.
• Own the enterprise data privacy program, ensuring its effectiveness, regulatory compliance, and maturity.
• Provide legal leadership for the global data privacy framework, including interpretation of applicable laws and regulatory expectations.
• Oversee day-to-day privacy operations managed within the Compliance Department.
• Lead legal aspects of cybersecurity incident response, including regulatory analysis and support for notification decisions.
• Support engagement with data protection authorities, regulators, and internal stakeholders on privacy matters.
• Monitor changes in laws and regulations impacting compliance and data privacy.
• Assess legal and compliance risks and advise proactively on mitigation strategies.
• Support AI governance, risk assessments, and related procedures to ensure responsible AI use.
• Build strong relationships with internal stakeholders including Cybersecurity, Compliance Operations, Internal Audit, Product and Technology teams, Government Relations, and Executive Leadership.
• Support internal investigations, audits, and regulatory inquiries related to compliance.
• Manage and coordinate external legal counsel on specialized compliance and data privacy matters.
• Support interactions with regulators and external stakeholders as required.

Qualifications

Minimum Experience

• 10+ years of related professional legal experience.

Education and Experience

• Law degree (LLB / JD or equivalent) from an accredited university.
• Experience in white-collar crime and corporate compliance (strongly preferred).
• Experience in Data Privacy and Technology Law, including knowledge of EU GDPR (strongly preferred).
• Exposure to privacy operations such as data protection authorities and breach response (strongly preferred).
• Experience managing and/or supervising other legal professionals (strongly preferred).

Bar Admission

• Active U.S. bar membership in good standing in at least one state.

Compensation and Benefits

• Estimated starting compensation range: $117,880 - $240,000, with actual pay potentially higher or lower depending on background, skills, experience, and work location.
• Base pay is part of a total rewards program that may include discretionary bonuses, 401(k) Savings Plan with company contributions, health, dental, and vision insurance, life, accident, and disability insurance, tuition reimbursement, paid time off, wellness programs, and identity theft insurance.
• Eligibility requirements apply to benefits programs.

Location

• Primary location: Providence, RI, 02903.
• This role supports operations across multiple U.S. states including IA, KY, DE, MS, PA, SC, NJ, OK, NM, MO, TX, MA, MI, AL, VA, OR, MT, GA, CO, RI, IN, WA, DC, TN, SD, AZ, KS, CA, MD, IL, NV, ME, MN, CT, AR, FL, NY, WI, WV, WY, OH, UT, NE, ID, NH, NC, and LA.

Additional Information

• Annual information security training will be assigned and required as appropriate.
• The role requires strong influencing and stakeholder management skills, the ability to communicate complex legal concepts clearly to non-legal audiences, and collaboration across multiple geographies and matrix organizations.