Provide legal leadership on AI governance and responsible adoption of AI/ML/LLMs, including risk-based reviews, internal controls, documentation, and oversight mechanisms (e.g., transparency, accountability, human oversight).
Monitor and interpret AI legal and regulatory developments, and develop internal guidance/training aligned to best practices, frameworks, and evolving global and U.S. state automated decision-making laws.
Partner with AI/Data teams to implement legal, technical, and operational requirements for AI solutions as regulations and enforcement evolve globally; support development/review of Responsible AI documentation.
Advise on privacy and data protection laws and regulatory trends (e.g., U.S. state privacy laws, GDPR, sectoral requirements as applicable), and embed “privacy-by-design” into products and operations.
Lead and/or oversee privacy impact assessments and data protection impact assessments, and maintain core privacy program artifacts (e.g., records of processing, DPIAs/PIAs).
Partner with Marketing and digital teams on privacy requirements for cookies, pixels, SDKs, analytics/advertising technologies, and consent management practices.
Provide legal support for cybersecurity programs, including incident response planning and execution, investigations, audits, and regulatory inquiries related to data practices.
Advise on data management and security practices supporting infrastructure/software development and advanced analytics/AI use cases (financial services or other regulated environments as applicable).
Draft, review, and negotiate data protection agreements, vendor and technology contracts, and privacy provisions; support procurement and vendor management processes.
Conduct privacy and AI vendor diligence and governance reviews, including assessment of vendor controls and risk posture for data processing and AI capabilities.
Maintain and update internal privacy/data governance policies; create external/customer-facing privacy documentation (e.g., FAQs, data sheets) to support transparency and trust.
Drive training and awareness programs on privacy, cybersecurity, and AI governance; develop playbooks and practical guidance for cross-functional teams.
Shape and execute a forward-looking roadmap for privacy and AI initiatives to support business growth and product expansion.

Requirements

Juris Doctor (JD) from an accredited law school and active bar membership (or ability to obtain/maintain as required).
5+ years of relevant legal experience with a strong focus on privacy, data protection, cybersecurity, and AI governance (law firm and/or in-house).
Hands-on experience building and operationalizing AI governance principles, controls, and documentation; comfort advising on AI/ML/LLMs and emerging AI regulation.
Demonstrated experience advising cross-functionally and translating regulatory obligations into pragmatic business solutions.
Strong drafting and negotiation skills for data-related and technology agreements, including vendor/customer contracting and privacy/security terms.

Benefits

Medical, Dental, Vision Insurance
401k, With Matching Contributions
Short-Term/Long-Term Disability Insurance
Health Savings Account (HSA)/Health Reimbursement Account (HRA) Options
Paid Time Off (including sick, holiday, vacation, etc.)
Tuition Reimbursement
Growth Opportunities
And more!

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills & Tools

AI governanceAI/ML/LLMsprivacy impact assessmentsdata protection impact assessmentsdata protection agreementsvendor managementcybersecurity programsdata managementcontract negotiationregulatory compliance

Soft Skills

legal leadershipcross-functional collaborationadvisingdraftingnegotiationtraining and awarenesscommunicationproblem-solvingstrategic planningtranslating regulatory obligations

Certifications

Juris Doctor (JD)active bar membership