Assistant General Counsel

Title:

Assistant General Counsel

Location:

Nashville TN OR Sterling VA (onsite Tuesday, Wednesday, & Thursday)

The Assistant General Counsel serves as a senior in‑house attorney responsible for providing cross‑functional strategic counsel and leadership across AI governance, cybersecurity, product counseling, data use, and privacy. The AGC is a trusted advisor to senior leaders in Product, Engineering, Data Science, Security, Compliance, and GM organizations, balancing legal risk with commercial realities in a tech support, extended service contract, and limited lines insurance environment.

The role has formal supervisory responsibility for attorneys and professional staff, supports disclosure‑grade documentation, governance, and enterprise policy and direction in partnership with the Chief Information Security Officer, AI Transformation Team and Chief Compliance Officer.

• AI Legal Strategist and Advisor
  • Serve as legal authority on AI development deployment and legal risk across the enterprise; lead the Responsible AI framework, in alignment with NAIC standards
  • Advise Engineering and Data Science across the AI lifecycle. Partner with product, engineering data science teams from early design through deployment to identify and mitigate legal exposure in AI powered products.
  • Stay abreast of novel AI issues and AI regulation impacting the company
• Cybersecurity Legal
  • Partner with the CISO office to counsel on security‑by‑design, vendor security diligence, model/data leakage, and AI assurance.
  • Lead the legal incident response workstream and advise on disclosure‑grade cyber risk management and governance, building toward SEC Item 106 (17 CFR 229.106) standards.
• Client and Vendor Contracting (AI, Privacy, Cybersecurity)
  • Support contracting attorneys in the negotiation and approval of AI, privacy, and cybersecurity terms in enterprise revenue and vendor contracts in partnership with the VP of Revenue Contracts.
  • Maintain the company’s AI Addendum support negotiations related to controller/processor positioning.
  • Operationalize data use restrictions and purpose limitations.
• Product Counseling
  • Provide pragmatic legal guidance to Product, Engineering, CX, and Marketing leaders on data use, biometrics, and AI‑enabled product features.
  • Translate enterprise customer contractual constraints into actionable product requirements and risk controls.
• Privacy Legal
  • Advise on U.S. state privacy regimes, role clarity, purpose limitation, data minimization, retention, and cross‑use risks; maintain working knowledge of GDPR.
  • Coordinate with EU subsidiary counsel for harmonized positions while respecting operational independence; support Privacy Operations on DSRs, vendor reviews, DPAs, subprocessor lists, and incident response.
• People Leadership and Supervision
  • Demonstrated ability to lead, coach, and develop high‑performing teams, with a track record of building talent and driving team effectiveness. Foster an inclusive, high‑performance team culture.
• Education and Experience
  • Juris Doctor (JD) and active U.S. bar admission in good standing.
  • 10+ years of progressively responsible legal experience, including significant in‑house experience.
  • Demonstrated expertise in AI legal governance (e.g., NIST AI RMF 1.0, NIST Generative AI Profile, ISO/IEC 42001:2023).
  • Substantive cybersecurity legal experience, including vendor diligence, incident response, and disclosure obligations (SEC Item 106 of Regulation S‑K).
  • Commercial contracting fluency across AI, privacy, and security in enterprise revenue and vendor agreements.
  • Privacy law expertise in CCPA/CPRA and other U.S. state regimes; working knowledge of GDPR.
  • Formal supervisory or people leadership experience for attorneys and professional staff.
  • Proven ability to manage outside counsel and strategy for litigation and regulatory proceedings.
  • Strong analytical research skills, innovative problem solving, and independent judgment.
  • Strongly Preferred:
    Public‑company or pre‑public governance experience; technology industry experience (carrier, hardware/software); regulated industries experience; extended service contract, warranty, consumer protection expertise; experience with strict…