Overview
A leading identity-assured transaction management platform is seeking a Senior AI Counsel to serve as the hands-on legal lead for privacy, with significant responsibility across AI governance and security law. This senior individual contributor role reports directly to the Chief Privacy Officer and involves close partnership with product, engineering, security, and go-to-market teams to ensure privacy is central to product development.
The organization handles sensitive identity data including biometrics, government IDs, and recorded notarization sessions, making privacy a mission-critical function.
Responsibilities
AI Governance
- Provide legal and regulatory advice on the use of AI and machine learning technologies such as identity verification, biometric comparison, and fraud detection.
- Develop and manage the AI governance framework covering model risk, transparency, fairness, and vendor AI assessments.
- Advise on automated decision-making, profiling, and bias-audit requirements, including compliance with New York City's Local Law 144 on automated employment decision tools and California CPPA regulations on automated decision-making technology, as well as emerging state obligations.
- Review AI-related product features, training data practices, and AI terms in customer and vendor contracts.
Privacy
- Serve as legal advisor on global privacy and data protection laws including U.S. state privacy laws (CCPA/CPRA and others), GLBA, biometric privacy laws such as BIPA, HIPAA where applicable, and GDPR/UK GDPR.
- Manage and enhance the privacy program, including policies, data mapping, records of processing, privacy and data protection impact assessments, retention schedules, and privacy-by-design reviews.
- Collaborate with commercial counsel on data processing agreements, standard contractual clauses, and privacy terms with customers, vendors, and partners.
- Advise product and engineering teams on handling identity data, biometrics, and notarization recordings throughout the data lifecycle.
- Oversee consumer and data subject rights requests, privacy notices, consent flows, and cookie/tracking compliance.
- Support government affairs and public policy teams by monitoring evolving privacy regulations and translating them into practical business guidance.
- Assist with RFPs, due diligence, and audit responses.
Security & Incident Response
- Partner with the security team on legal aspects of information security, readiness, security questionnaires, and customer security commitments.
- Advise on breach assessment and notification obligations and help lead legal responses to security incidents.
- Support vendor security and risk reviews and related contractual security requirements.
Cross-functional
- Act as a trusted advisor to executives and product leaders, providing clear, risk-calibrated, business-focused legal counsel.
- Develop scalable training, playbooks, and self-serve resources to improve privacy and security awareness across the organization.
- Support regulatory inquiries, audits, and customer due diligence processes.
Requirements
- Juris Doctor (J.D.) degree and active membership in good standing in at least one U.S. state bar.
- Minimum of 6 years of relevant legal experience in law firm and/or in-house roles, with a substantial focus on privacy and data protection.
- Deep, current knowledge of U.S. privacy laws including CCPA/CPRA, state comprehensive laws, GLBA, BIPA, and working fluency with GDPR.
- Proven track record of operationalizing privacy programs in fast-moving product environments.
- Strong drafting and negotiation skills for data processing agreements and data-related commercial terms.
- Excellent judgment and communication skills, able to translate complex legal requirements into clear, actionable guidance.
- Ability to work independently and manage competing priorities in a high-growth environment.
- Experience advising on biometric data and/or e-signature and online notarization regulatory regimes.
- Understanding of technology and machine learning concepts.
- Experience in identity, fintech, security, healthcare, or other regulated-data industries.
- Familiarity with AI/ML governance and emerging AI regulations such as the EU AI Act and NIST AI Risk Management Framework.
- Working knowledge of security frameworks including SOC 2, ISO, and NIST, and incident response.
Preferred Qualifications
- Privacy certifications such as CIPP/US, CIPP/E, CIPM, or CIPT.
- AI governance certification such as the IAPP Artificial Intelligence Governance Professional (AIGP).
- Security certifications such as CISSP, CISM, CISA, or CCSP.
Compensation & Benefits
- Salary range: $150,000 - $225,000 per year (varies by location and candidate qualifications).
- Comprehensive medical, dental, and vision benefits.
- Life insurance, long-term and short-term disability coverage.
- 401(k) plan with 4% match starting on hire date.
- Unlimited sick and vacation time.
- 14 paid company holidays.
- 12 weeks of paid parental leave.
- 4-week sabbatical after 5 years of continuous full-time employment.
- Health reimbursement arrangements for fertility and gender affirmation.
- Monthly work-from-home stipend.
- Professional development credit.
- Monthly wellness reimbursement.
- Additional benefits including lunch credits.
Total compensation includes base pay, benefits, and equity.
Location
This position is open to candidates in the United States. The role will remain open for applications through July 10, 2026.
Additional Information
The organization uses identity verification and fraud prevention tools to confirm the identity of individuals engaging with the platform. These tools are solely for identity verification and fraud prevention and are not used to assess employment eligibility or qualifications.
The employer is committed to building an inclusive environment and is an equal opportunity employer, not discriminating based on race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status.
Artificial intelligence tools may be used to assist in parts of the hiring process, such as reviewing applications and analyzing resumes, but final hiring decisions are made by humans.