Overview
This role is embedded within the Legal / Global Privacy and Data Protection function and reports to the Global Privacy Leader. It provides strategic legal counsel on privacy, artificial intelligence, data governance, and emerging technology initiatives across the organization’s worldwide business operations.
The position supports AI-enabled products and services, including generative and multimodal AI, AI assistants and agentic capabilities, personalization features, on-device and cloud processing, and third-party integrations. It partners with cross-functional teams and other legal subject matter experts to identify risks, develop mitigation strategies, support product launches, and help drive scalable governance processes.
Responsibilities
- Serve as a privacy legal advisor for product, engineering, and business teams developing AI-enabled products and services.
- Provide practical, risk-based guidance throughout the product lifecycle; partner with relevant stakeholders to identify legal and regulatory risks, develop mitigation measures, support launch readiness, and enable ongoing governance.
- Conduct and support privacy impact assessments, AI risk assessments, and other legal reviews to identify requirements, mitigation measures, residual risks, and items requiring escalation.
- Review and advise on product requirements, architectures, data flows, privacy notices, consent mechanisms, launch plans, and supporting documentation.
- Draft, review, and negotiate agreements involving AI technologies, data licensing, cloud services, software development, suppliers, and strategic technology partners.
- Develop and maintain scalable governance frameworks, policies, standards, assessment templates, and review processes supporting privacy and AI compliance.
- Support investigations and response activities involving privacy, data governance, AI, or cybersecurity-related issues.
- Monitor global legal, regulatory, enforcement, and policy developments affecting AI and emerging technologies and advise stakeholders on business and product impacts.
- Improve review processes, reduce bottlenecks, and create scalable guidance for recurring issues while maintaining strong documentation and defensible decision-making.
Requirements (Basic Qualifications)
- Juris Doctor degree from an accredited law school.
- Active license to practice law and good standing in at least one United States jurisdiction.
- 12+ years of relevant legal experience, including substantial experience in privacy, data protection, product counseling, AI, machine learning, or other data-intensive technologies.
- Demonstrated experience advising technology, software, digital-service, or AI product teams throughout the product-development lifecycle.
- Strong working knowledge of U.S. and international privacy and data protection requirements, including GDPR and U.S. state privacy laws, and their application to emerging AI technologies and complex global data flows.
- Strong technical fluency to understand system architecture, data flows, model documentation, software and cloud integrations, security assessments, and AI-enabled products and services.
- Excellent written and verbal communication skills, sound legal judgment, and ability to translate complex legal and technical concepts into practical business guidance.
- Demonstrated ability to independently manage multiple complex projects, prioritize effectively, identify and escalate material risks, and thrive in a fast-paced global organization.
- Privacy and AI governance certifications (CIPP/US, CIPP/E, AIGP, or comparable credentials).
Preferred Qualifications
- Experience advising on generative AI, foundation or large language models, multimodal models, AI assistants, agentic systems, retrieval-augmented generation, model training and fine-tuning, model evaluation, or on-device and cloud inference.
- Experience supporting integrated hardware, software, cloud, and AI ecosystems (e.g., PCs, smartphones, tablets, connected devices, operating-system integrations, software preloads, applications, APIs, SDKs, and third-party services).
- Familiarity with AI governance programs and frameworks, including the EU AI Act, NIST AI Risk Management Framework, ISO 27701, or similar standards.
- Experience advising on biometrics, sensitive personal information, automated decision-making, consumer protection, or AI safety issues.
- Experience with privacy engineering, data governance, privacy-enhancing technologies, and impact assessment programs.
- Experience reviewing or advising on commercial agreements involving AI technologies, cloud services, software, data licensing, or technology partnerships.
- Experience supporting regulatory inquiries, investigations, or incident response activities.
- Experience advising a global multinational or consumer technology company.
- Undergraduate or graduate degree(s) in Computer Science, Computer Engineering, or equivalent is a plus.
Compensation & Benefits
- Base salary budgeted range: $170k - 210K.
- Individuals may also be considered for bonus and/or commission.
- Benefits are available through the organization’s benefits program.
Location
This role has an expected application deadline of October 27, 2026, in compliance with Colorado's EPEWA (applies to both external and internal candidates).
Travel
Approximately 10%