Senior Counsel - Privacy, Cybersecurity and AI

Overview

The organization is seeking a key member of its privacy team to provide legal counsel on complex global privacy, cybersecurity, and artificial intelligence (AI) governance matters. This role requires independent judgment, a sense of urgency, and the ability to manage complex work with minimal supervision.

Preference is given to candidates near four key offices: Denver, Cedar Rapids, Baltimore, and Philadelphia. Remote candidates will be considered.

Responsibilities

• Independently handle complex privacy, cybersecurity, and AI legal matters with minimal supervision, partnering closely with the privacy team
• Advise business stakeholders on privacy, cybersecurity, and AI governance regulatory requirements by translating legal obligations into actionable implementation strategies
• Identify, quantify, and communicate risk to decision-makers effectively
• Support global AI governance initiatives, including reviewing AI use cases for legal and regulatory compliance and assisting with implementation of AI governance frameworks
• Support global privacy operations, including privacy impact assessments (PIAs), data protection impact assessments (DPIAs), data subject access requests (DSARs), records of processing activities (RoPAs), and third-party privacy risk management
• Draft, review, and negotiate privacy-related legal agreements, including data processing agreements and data transfer agreements
• Design and implement scalable privacy and AI compliance frameworks and repeatable processes that support business growth while managing legal and regulatory risk across the globe
• Identify training needs and develop and deliver privacy and AI regulatory training across the organization
• Drive cross-functional projects to completion, coordinate outside counsel, and respond to regulatory inquiries

Qualifications

• JD from an ABA-accredited law school or equivalent legal experience
• Licensed to practice law in the U.S.
• 5 years of global privacy legal experience, preferably at a large law firm or in-house within a global financial services company
• 2 years of AI governance experience, including advising on AI regulations and supporting successful implementation of AI governance programs
• Deep subject matter expertise across global privacy, cybersecurity, and AI regulatory frameworks, including CCPA, GLB, HIPAA, NAIC AI Model Bulletin, NYDFS, Colorado AI Act, GDPR, PIPEDA, and LOPD
• Strong technical fluency and the ability to engage meaningfully with technical concepts related to AI, data, and cybersecurity
• Exceptionally strong written and oral communication skills, with the ability to provide clear, practical legal advice and concrete implementation strategies for diverse audiences
• Experience driving change through influence rather than direct authority
• Intellectually curious, action-oriented, and willing to iterate quickly

Preferred Qualifications

• 7 years of global privacy legal experience, preferably at a large law firm or in-house within the financial services industry
• Certified Information Privacy Professional (CIPP) or comparable privacy certification

Location / Working Conditions

• Hybrid for candidates near Baltimore, Cedar Rapids, Denver, or Philadelphia (3 days in office)
• Remote for candidates not near a core office location

Compensation & Benefits

• Salary generally ranges between $165,000 - $195,000 annually. This salary range is a good faith estimate; actual starting pay is determined by factors including qualifications, experience, geography, work location designation (in-office, hybrid, remote), and operational needs. Salary may vary above and below the stated amounts, as permitted by applicable law.
• Typically eligible for an Annual Bonus based on the Bonus Plan and individual performance; eligibility is at the organization’s discretion.

Disclaimer

This job description is not a contract of employment and does not guarantee any specific responsibilities. The organization may change, add to, remove, or revoke the terms of this job description at its discretion, and managers may assign other duties as needed. If an employee or applicant requests an accommodation to perform job functions, the applicable HR Business Partner should be contacted to evaluate the accommodation request.