Senior Counsel, Data Privacy & Security

Overview

A leading organization in the Finance and Insurance sector is seeking a Senior Counsel specializing in Data Privacy and Security. This role involves supporting high-impact legal work that directly influences business performance and team success. The position requires collaboration across multiple functions to advance priorities, solve complex challenges, and deliver measurable results. It offers the opportunity to shape both strategic direction and daily operations in a fast-paced environment.

Location: Remote (U.S. based candidates only; no visa sponsorship available)

Compensation: $150,770 – $224,640 annually

Responsibilities

• Provide legal advice on U.S. and international data privacy laws and emerging regulations
• Review and negotiate data-related contracts, including data processing agreements and cybersecurity provisions
• Monitor evolving cybersecurity laws and support compliance efforts within financial sectors
• Conduct legal risk assessments related to data-driven business activities
• Collaborate with cross-functional teams on data initiatives and support due diligence for mergers and acquisitions
• Assist with incident response procedures and develop compliance training programs
• Contribute to enterprise risk management and participate in regulatory working groups

Qualifications

• Juris Doctor (JD) degree from an accredited law school; advanced degree (LLM) in privacy law, cybersecurity, or technology law preferred
• Minimum of 6 years of legal experience focused on data privacy, cybersecurity, and risk management
• Licensed to practice law in the United States
• Preferred certifications include CISSP, CIPP, CIPM, CIPT, and CISA
• Experience with U.S. and global cybersecurity and privacy laws and frameworks such as GLBA, HIPAA, CCPA, GDPR
• Strong skills in drafting policies, agreements, and legal documentation
• Prior in-house counsel experience in financial services, insurance, or technology sectors is preferred

Desired Skills and Experience

• Knowledge of GLBA, HIPAA, CAN-SPAM Act, CCPA, PIPEDA, GDPR, PDPA
• Familiarity with cybersecurity frameworks such as NIST CSF, NIST PF, CIS, ISO, SOC2
• Expertise in Privacy Impact Assessments, Data Processing Agreements, and Incident Response Plans
• Experience with contract negotiation, data subject rights processes, cross-border data transfer regulations, and data analytics technologies

Benefits

• Opportunity to gain valuable knowledge through global collaboration
• Work within a respectful and inclusive environment
• Significant potential for career growth within a dynamic team

The employer is an equal opportunity organization and encourages applications from candidates who may not meet every qualification but bring unique backgrounds and perspectives.