Counsel - Privacy, Risk, and Data Security

Core Responsibilities

• Serve as a senior legal advisor on compliance with U.S. state, federal, and applicable international data privacy laws and regulations.
• Lead the development, interpretation, and enforcement of privacy policies, notices, data processing agreements, and consent mechanisms.
• Advise on complex data subject rights matters and oversee risk‑based approaches to rights fulfillment.
• Provide strategic guidance on privacy issues arising from new products, data initiatives, and technology deployments.
• Design and oversee enterprise data governance frameworks, including data retention, destruction, defensible deletion, and records management.
• Partner with IT, compliance, and business leaders to ensure effective data classification, cataloguing, and lifecycle management.
• Lead or advise on data protection impact assessments and other legal risk assessments for high‑risk processing activities.
• Provide senior‑level legal guidance on cybersecurity preparedness, incident response, and regulatory notification obligations.
• Advise executive and technical teams during security incidents, including regulatory engagement and remediation strategy.
• Lead or support tabletop exercises and post‑incident reviews to continuously strengthen organizational resilience.
• Help define and evolve the organization’s AI governance framework, including principles, policies, roles, and accountability structures for responsible AI use.
• Advise on ethical, legal, and risk considerations associated with AI systems, including transparency, bias, explainability, and human oversight.
• Monitor, interpret, and advise on AI‑related laws, regulations, standards, and regulatory guidance across U.S. states, federal agencies, and relevant international jurisdictions.
• Translate emerging regulatory requirements into practical governance controls, policies, and business guidance.
• Advise on legal and compliance considerations during AI design, development, training, testing, and validation, including data sourcing, model risk, and documentation expectations.
• Partner with technology and product teams to embed privacy‑by‑design and governance‑by‑design principles into AI development workflows.
• Support governance processes for AI intake, approval, deployment, and ongoing monitoring of AI systems and use cases.
• Advise on appropriate human‑in‑the‑loop controls, validation practices, and usage restrictions for AI‑enabled tools.
• Review AI‑related vendor engagements, including data rights, model training restrictions, security controls, and regulatory compliance obligations.
• Track and assess regulatory developments in insurance, securities, privacy, cybersecurity, and AI.
• Conduct and oversee legal risk assessments for technology platforms, AI tools, and third‑party vendors.
• Support internal audits, examinations, and regulatory inquiries related to data protection, cybersecurity, and AI governance.
• Serve as a trusted advisor to senior leaders across IT, cybersecurity, compliance, product, HR, and business teams.
• Help lead cross‑functional governance committees and working groups related to privacy, security, and AI.
• Support training, awareness, and internal communications related to responsible data and AI use.

Experience

• 6–10+ years of relevant legal experience, preferably in‑house and/or at a law firm with a focus on privacy, technology, cybersecurity, regulatory, or emerging technology law.
• Demonstrated experience advising on AI governance, technology risk, or complex data initiatives.
• JD from an accredited law school with excellent academic credentials
• Licensed and in good standing with the State Bar of Texas or another state bar
• Deep knowledge of U.S. privacy laws, cybersecurity frameworks (e.g., NIST, ISO 27001), and AI governance principles
• Experience operationalizing AI governance across the full AI lifecycle
• Ability to translate complex regulatory requirements into pragmatic, business‑enabling guidance
• Strong executive presence, judgment, and stakeholder management skills
• Highly organized, detail oriented, and comfortable operating in a fast‑paced, evolving environment
• Excellent written and verbal communication skills
• Intellectual curiosity, collaborative mindset, and…