Senior Counsel - Privacy, Cybersecurity and AI
Responsibilities:
Independently handle complex privacy, cybersecurity and AI legal matters with minimal supervision, serving as a trusted and collaborative member of the privacy team
Advise business stakeholders on privacy, cybersecurity and AI governance regulatory requirements, translating legal obligations into practical, actionable implementation strategies while effectively identifying, quantifying, and communicating risk to decision-makers
Partner on global AI governance initiatives, including reviewing AI use cases for legal and regulatory compliance and supporting the organization in successfully implementing AI governance frameworks
Support core privacy operations across the global enterprise, including privacy impact assessments (PIAs), data protection impact assessments (DPIAs), data subject access requests (DSARs), records of processing activities (RoPAs), and third-party privacy risk management
Draft, review, and negotiate privacy-related legal agreements, including data processing agreements and data transfer agreements
Design and implement scalable privacy and AI compliance frameworks and repeatable processes that support business growth while managing legal and regulatory risk across the globe
Identify training needs and develop and deliver privacy and AI regulatory training across the organization
Drive cross-functional projects to completion, coordinate outside counsel, and respond to regulatory inquiries
Qualifications:
JD from an ABA-accredited law school or equivalent legal experience
Licensed to practice law in the U.S.
5 years of global privacy legal experience, preferably at a large law firm or in-house within a global financial services company
2 years of AI governance experience, including advising on AI regulations and supporting successful implementation of AI governance programs
Deep subject matter expertise across global privacy, cybersecurity and AI regulatory frameworks, including CCPA, GLB, HIPAA, NAIC AI Model Bulletin, NYDFS, Colorado AI Act, GDPR, PIPEDA, and LOPD
Strong technical fluency, with the ability to engage meaningfully with technical concepts related to AI, data, and cybersecurity
Exceptionally strong written and oral communication skills, with the ability to provide clear, practical legal advice and concrete implementation strategies for diverse audiences
Experience driving change through influence rather than direct authority
Intellectually curious, action-oriented, and willing to fail fast, learn, and iterate
Preferred Qualifications:
7 years of global privacy legal experience, preferably at a large law firm or in-house within the financial services industry
Certified Information Privacy Professional (CIPP) or comparable privacy certification
Working Conditions:
Hybrid location for candidates near Baltimore/Cedar Rapids/Denver/Philadelphia (3 days in office)
Remote location for candidates not near a core office location
Compensation:
The Salary for this position generally ranges between $165,000 - $195,000 annually. Please note that the salary range is a good faith estimate for this position and actual starting pay is determined by several factors including qualifications, experience, geography, work location designation (in-office, hybrid, remote) and operational needs. Salary may vary above and below the stated amounts, as permitted by applicable law.
Additionally, this position is typically eligible for an Annual Bonus based on the Company Bonus Plan/Individual Performance and is at the Company’s discretion.
#LI-BD1
This job description is not a contract of employment nor for any specific job responsibilities. The Company may change, add to, remove, or revoke the terms of this job description at its discretion. Managers may assign other duties and responsibilities as needed. In the event an employee or applicant requests or requires an accommodation in order to perform job functions, the applicable HR Business Partner should be contacted to evaluate the accommodation request.
Disclaimer:
Beware of fake job offers!
We’ve been alerted to scammers impersonating Transamerica recruiters, particularly for remote positions. Please note:
We will never request personal information such as ID or payment for equipment upfront.
Official offers are sent via DocuSign following a verbal offer—not through text or email.