Corporate Counsel III (Privacy, Digital Risk, and AI Governance)

Overview

This role supports the organization’s Privacy Office by advising on compliance with applicable privacy, AI, and digital laws, regulations, and industry frameworks. Guidance covers U.S. state privacy and AI laws, HIPAA and HITECH, the EU AI Act, and the NIST AI Risk Management Framework.

You will serve as the team’s principal legal specialist for AI regulatory compliance, partnering with legal counsel focused on privacy, digital risk, and cybersecurity. Work includes risk-based, practical guidance for business teams, AI & Data Analytics, and Legal.

Responsibilities

• Proactively monitor and interpret developing privacy and AI laws, regulations, and industry frameworks to support regulatory compliance.
• Provide legal oversight and guidance for digital compliance risks, including:
  • Website and application terms & conditions
  • Online tracking technologies
  • Digital accessibility requirements
  • Digital asset disclosures
  • Employee data access policies
• Incorporate privacy, AI, and digital compliance-by-design principles into applicable initiatives from the outset.
• Conduct enterprise legal risk reviews across privacy, AI, and digital matters, including:
  • Privacy and AI impact assessments
  • Data subject rights request reviews
  • Supplier privacy reviews
  • Legal review and classification of AI use cases
• Support modernization and development of digital and data legal and governance capabilities, including policies, procedures, and overall risk governance for privacy, AI, and digital matters.
• Advise on privacy- and AI-related incidents, investigations, mitigation and response activities, regulatory reporting, and regulatory inquiries.
• Serve as a primary legal specialist for privacy, AI, and digital regulatory compliance and risk for the AI & Data Analytics Office and Legal, including:
  • Maintaining related policies and contract templates
  • Advising on specialized or complex matters requiring subject-matter expertise
• Partner cross-functionally to continuously improve, operationalize, and evolve privacy, AI, and digital governance programs, translating regulatory requirements into practical, scalable processes and controls, including:
  • Privacy and AI impact assessments
  • AI use-case review and classification
  • AI governance
  • Online privacy and digital compliance
  • Specialized privacy and AI contract negotiations
• Monitor evolving privacy, AI, and digital legal requirements and advise stakeholders on their impact.

Required Qualifications

• Work Experience: 7 or more years of applicable experience
• Education: Juris Doctorate
• Required Certifications/Licensing: Active license in good standing to practice law in at least one U.S. jurisdiction, with eligibility to serve as in-house counsel as required.

Preferred Qualifications

• One or more relevant privacy or AI governance certifications, such as CIPP/US, CIPP/E, CIPM, CIPT, or AIGP.
• Experience operationalizing privacy, AI, and digital risk programs and related processes.
• Familiarity with OneTrust, Transcend, or similar privacy or AI governance platforms.
• At least 5 years of relevant legal experience (preferably 5 to 7 or more years) advising on privacy, AI, digital compliance, technology, or related regulatory matters in a law firm, in-house legal department, government agency, or comparable environment.
• Substantive knowledge of U.S. privacy and data protection laws, including HIPAA and HITECH, state comprehensive privacy laws, state consumer health data laws, and requirements governing the collection, use, disclosure, retention, and protection of personal information.
• Demonstrated experience interpreting AI laws, regulations, and recognized AI governance frameworks (including U.S. federal and state requirements, the EU AI Act, and the NIST AI Risk Management Framework) and translating those requirements into practical guidance for AI, data, Technology, compliance, and business teams.
• Experience advising on the development, procurement, deployment, and use of AI systems, including identifying the organization’s regulatory role (e.g., provider, deployer, or other regulated participant), evaluating prohibited/high-risk/consequential decision-related use cases, and supporting transparency and human oversight requirements.
• Hands-on experience conducting or providing legal oversight for privacy, AI, and digital risk assessments, including privacy and AI impact assessments, records of processing activities, data subject request workflows, AI use-case intake and classification, supplier privacy reviews, and assessments of new products, technologies, data uses, or business initiatives.
• Experience advising business, product, technology, AI, and data stakeholders during design/implementation of new products, services, systems, vendors, and AI use cases.
• Experience advising on digital compliance matters, including website/application privacy disclosures, online tracking technologies, cookies and consent requirements, consumer-facing data practices, and accessibility-related legal requirements.
• Experience drafting, reviewing, and negotiating specialized or complex privacy, AI, and technology provisions in commercial agreements (including data processing agreements, business associate agreements, and nonstandard AI provisions related to permitted data/model uses, training restrictions, transparency, human oversight, monitoring, and regulatory allocation of responsibility).
• Experience developing, implementing, or materially improving privacy, AI, or digital governance programs, including policies, standards, procedures, assessment methodologies, inventories, templates, decision records, escalation protocols, training materials, and compliance workflows.

Compensation & Benefits

• Internal salary range: $141,000 - $234,000
• Final salary depends on market factors including departmental budgets, internal equity, education, unique skills/experience, and geographic location.
• Benefits for qualified full-time and part-time employees include:
  • Health, dental, vision, life and disability insurance
  • 401k retirement program
  • Paid time off
  • Participation in employee incentive plans
  • Tuition reimbursement and professional development opportunities

Location

• Working conditions: Remote
• Travel requirements: Travel 1–20% within the US

Working Conditions / Physical Demands

• Remain in a stationary position for prolonged periods of time
• Adapt to changing priorities quickly and meet deadlines
• Attention to detail
• Operate computer programs and software
• Ability to communicate effectively with audiences in person and in electronic formats
• Day-to-day contact with others (co-workers and/or the public)
• Make independent decisions
• Ability to work collaboratively in a close-quarters environment with peers and varying interruptions
• Physical demands: Sedentary; exerting up to 10 pounds of force occasionally, and/or a negligible amount of force frequently or constantly to lift, carry, push, pull or otherwise move objects (including the human body)