Senior Counsel - Privacy, Cybersecurity and AI

Overview

This role is for a Legal Counsel specializing in privacy, cybersecurity, and artificial intelligence (AI) governance. The position involves providing legal counsel on complex global privacy and AI matters, supporting privacy operations, and helping implement AI governance frameworks. The ideal candidate will have strong expertise at the intersection of law, technology, and business strategy.

Responsibilities

• Independently manage complex privacy, cybersecurity, and AI legal issues with minimal supervision.
• Advise business stakeholders on regulatory requirements related to privacy, cybersecurity, and AI governance, translating legal obligations into actionable strategies.
• Partner on global AI governance initiatives, including reviewing AI use cases for compliance and supporting AI governance framework implementation.
• Support core privacy operations such as privacy impact assessments (PIAs), data protection impact assessments (DPIAs), data subject access requests (DSARs), records of processing activities (RoPAs), and third-party privacy risk management.
• Draft, review, and negotiate privacy-related legal agreements, including data processing and data transfer agreements.
• Design and implement scalable privacy and AI compliance frameworks and repeatable processes to support business growth while managing legal and regulatory risk globally.
• Identify training needs and develop and deliver privacy and AI regulatory training across the organization.
• Lead cross-functional projects, coordinate with outside counsel, and respond to regulatory inquiries.

Requirements

• Juris Doctor (JD) from an ABA-accredited law school or equivalent legal experience.
• Licensed to practice law in the United States.
• Minimum of 5 years of global privacy legal experience, preferably at a large law firm or in-house within a global financial services company.
• At least 2 years of AI governance experience, including advising on AI regulations and supporting AI governance program implementation.
• Deep expertise in global privacy, cybersecurity, and AI regulatory frameworks such as CCPA, GLB, HIPAA, NAIC AI Model Bulletin, NYDFS, Colorado AI Act, GDPR, PIPEDA, and LOPD.
• Strong technical fluency to engage with AI, data, and cybersecurity concepts.
• Excellent written and oral communication skills, capable of providing clear, practical legal advice and implementation strategies.
• Experience influencing change without direct authority.
• Intellectual curiosity, action-oriented mindset, and willingness to learn and iterate.

Preferred Qualifications

• 7 years of global privacy legal experience, preferably in financial services.
• Certified Information Privacy Professional (CIPP) or comparable privacy certification.

Compensation & Benefits

• Salary range: $165,000 - $195,000 annually, with actual pay determined by qualifications, experience, geography, work location, and operational needs.
• Eligibility for an annual bonus based on company and individual performance.
• Comprehensive benefits package including:
  • Pension plan
  • 401(k) match
  • Employee stock purchase plan
  • Tuition reimbursement
  • Disability, medical, dental, and vision insurance
  • Employee discounts
  • Career training and development opportunities
  • Paid time off starting at 160 hours annually
  • Ten paid holidays per year
  • Holistic wellness program
  • Paid parental leave
  • Adoption assistance
  • Employee assistance and backup care programs
  • PTO for volunteer hours
  • Employee matching gifts
  • Employee resource groups and inclusion programs
  • Employee recognition and referral bonus programs

Location

• Hybrid work arrangement for candidates near Baltimore, Cedar Rapids, Denver, or Philadelphia (3 days in office).
• Remote work option available for candidates not near a core office location.

Additional Information

• This job description is not a contract and may be modified at the organization's discretion.
• Candidates should be aware of potential recruitment scams; official offers are made via formal channels only.

This position requires a candidate who can work independently, provide strategic legal guidance on emerging technologies, and support a global privacy and AI governance program within a dynamic environment.