Overview
This role is for a Legal Counsel specializing in privacy, cybersecurity, and artificial intelligence (AI) governance. The position involves providing legal counsel on complex global privacy and AI matters, supporting privacy operations, and helping implement AI governance frameworks. The ideal candidate will have strong expertise at the intersection of law, technology, and business strategy, with the ability to translate complex legal requirements into actionable guidance.
Preference is given to candidates near the offices in Denver, Cedar Rapids, Baltimore, or Philadelphia, but remote candidates will also be considered.
Responsibilities
- Independently manage complex privacy, cybersecurity, and AI legal matters with minimal supervision.
- Advise business stakeholders on regulatory requirements related to privacy, cybersecurity, and AI governance, translating legal obligations into practical implementation strategies.
- Partner on global AI governance initiatives, including reviewing AI use cases for legal and regulatory compliance and supporting AI governance framework implementation.
- Support core privacy operations such as privacy impact assessments (PIAs), data protection impact assessments (DPIAs), data subject access requests (DSARs), records of processing activities (RoPAs), and third-party privacy risk management.
- Draft, review, and negotiate privacy-related legal agreements, including data processing and data transfer agreements.
- Design and implement scalable privacy and AI compliance frameworks and repeatable processes to support business growth while managing legal and regulatory risk globally.
- Identify training needs and develop and deliver privacy and AI regulatory training across the organization.
- Lead cross-functional projects, coordinate with outside counsel, and respond to regulatory inquiries.
Requirements
- Juris Doctor (JD) from an ABA-accredited law school or equivalent legal experience.
- Licensed to practice law in the United States.
- Minimum of 5 years of global privacy legal experience, preferably at a large law firm or in-house within a global financial services company.
- At least 2 years of AI governance experience, including advising on AI regulations and supporting AI governance program implementation.
- Deep expertise in global privacy, cybersecurity, and AI regulatory frameworks such as CCPA, GLB, HIPAA, NAIC AI Model Bulletin, NYDFS, Colorado AI Act, GDPR, PIPEDA, and LOPD.
- Strong technical fluency to engage with AI, data, and cybersecurity concepts.
- Excellent written and oral communication skills, capable of providing clear, practical legal advice and implementation strategies.
- Experience influencing change without direct authority.
- Intellectual curiosity, action-oriented mindset, and willingness to learn and iterate.
Preferred Qualifications
- 7 years of global privacy legal experience, preferably in financial services.
- Certified Information Privacy Professional (CIPP) or comparable privacy certification.
Compensation & Benefits
- Salary range: $165,000 - $195,000 annually. Actual pay depends on qualifications, experience, geography, work location designation (in-office, hybrid, remote), and operational needs.
- Eligibility for an annual bonus based on company and individual performance.
Benefits include:
- Pension plan
- 401(k) match
- Employee stock purchase plan
- Tuition reimbursement
- Disability insurance
- Medical, dental, and vision insurance
- Employee discounts
- Career training and development opportunities
- Paid time off starting at 160 hours annually for first-year employees
- Ten paid holidays per year
- Holistic wellness program including coaching and rewards
- Paid parental leave (15 days per calendar year for eligible employees with at least one year of service)
- Adoption assistance
- Employee assistance program
- Backup care program
- Paid time off for volunteer hours
- Employee matching gifts program
- Employee resource groups
- Inclusion and diversity programs
- Employee recognition and referral bonus programs
Working Conditions
- Hybrid work model for candidates near Baltimore, Cedar Rapids, Denver, or Philadelphia offices (3 days in office).
- Remote work option for candidates not near core office locations.
Location
Candidates near Denver, Cedar Rapids, Baltimore, or Philadelphia are preferred, but remote candidates will be considered.
Additional Information
This job description is not a contract of employment and may be modified at the organization's discretion. Accommodation requests should be directed to the applicable HR Business Partner.
Beware of fraudulent job offers. Official offers are made via DocuSign following a verbal offer and will never request personal information or payment upfront.