Senior Associate General Counsel, Privacy
Core
Lead the development and execution of a comprehensive privacy and data protection program across a highly regulated financial services environment, focusing on emerging AI use cases and regulatory readiness.
Role type
Senior Associate General Counsel, Privacy
Builds
Enterprise-wide privacy strategy, governance, policies, and operational processes for a financial services organization.
Domain
Financial services, global data protection, AI privacy
Deliverable
production ML models | product features | dashboards & analysis | research | client delivery | infrastructure | physical/clinical work
Required skills
Enterprise privacy program leadership, global privacy regulations (GDPR, CCPA/CPRA, GLBA, SEC Reg S-P), AI privacy controls, data protection impact assessments, privacy risk management, executive stakeholder management, crisis management, strategic business guidance
Preferred skills
J.D. from accredited law school, Privacy certifications (CIPP/E, CIPP/US, CIPM, CIPT)
Technologies
NIST Privacy Framework, ISO 27701
Responsibilities
Define and execute enterprise-wide privacy strategy aligned with business priorities and regulatory requirements; Lead compliance with global privacy and data protection requirements including SEC Regulation S-P, GLBA, CCPA/CPRA, GDPR, PIPEDA; Develop, maintain, and enforce privacy policies, standards, data-handling procedures, and compliance metrics; Lead privacy risk assessments, Data Protection Impact Assessments (DPIAs), vendor privacy reviews, audits, gap assessments, and remediation initiatives; Develop AI-specific privacy policies and controls covering data input restrictions, redaction, anonymization, retention, secure storage, access management, monitoring, and employee training; Oversee data protection operations including data subject rights, consent management, retention and deletion, privacy-by-design, breach response, and appropriate use of data in AI applications; Support the management of privacy incidents by coordinating with security, communications, and other relevant teams; Partner with Compliance, Technology, People, Marketing, and executive stakeholders to integrate privacy considerations into systems, products, processes, and business strategy; Provide clear, concise, and commercially practical legal guidance while representing the privacy function with senior executives and other key stakeholders.
Seniority
Senior, hands-on IC with strategic leadership
