Assistant General Counsel- Head of North America Privacy

About the role

Aon is seeking an experienced privacy attorney to lead our North America privacy advisory function. Reporting to the Managing Counsel for Global Cyber and Americas Privacy, you will be the lead attorney for the Global Privacy and Data Trust Office in North America. You will work closely with the business, colleagues in the Law & Compliance department and GPDTO, the US risk team, cybersecurity, IT, and others to provide insight on privacy laws and regulations in North America and help protect Aon and grow its business.

Responsibilities

• Provide privacy and cyber legal advice to business, Law & Compliance, risk, cybersecurity, and other internal stakeholders
• Manage a high-performing team with a focus on excellent business and client service, risk-based advice, and coaching/growth
• Negotiate high-risk/large enterprise client privacy and data protection agreements
• Oversee and provide legal advice on privacy and security incidents
• Set strategic direction and priorities for North America privacy advisory function
• Stay up-to-date on emerging privacy and cyber trends, laws, regulations, enforcement actions, and settlements in your region and provide information and updates to key partners
• Advises and assists privacy assurance team colleagues on implementation of programs for new laws and regulations
• Advise on the privacy and cyber law aspects of acquisitions and other M&A activities
• Collaborate with colleagues across the company on privacy and cyber related projects
• Manage the North America privacy advisory function, ensuring adherence to benchmarks, conducting reporting/metrics, and identifying and implementing improvements

Requirements

This is a unique opportunity to lead and shape a complex privacy program across the North America, partnering directly with senior business leaders to influence strategy and navigate evolving privacy risks. Beyond providing legal guidance, you'll coach and develop a skilled team, drive continuous improvement, and help build innovative, practical solutions that support business growth while maintaining a strong culture of compliance and risk management.

Skills and Experience

• Licensed attorney with at least 7 years of experience in privacy, with increasing responsibility in an in-house environment
• Experience in a highly regulated, B2B industry is a plus
• Managed a high-performing team, coached team members to improve their skills and abilities, and enjoy team management
• Strong experience with privacy and cyber laws, including CCPA, GLBA, PIPEDA, and NYDFS
• Led complex and high-stakes privacy contract negotiations, particularly with potential business clients. You have excellent client management and negotiation skills
• Led data breach response, from the investigation stage through notification and regulator communications
• Excellent verbal and written communication skills. You can explain complex topics in an understandable way to business or non-attorney colleagues
• Business-focused and strategic. Skilled at balancing risk analysis and risk/business
• The ideal candidate is curious and has a continuous improvement mindset; eager to find new and better ways to do things, level up your and your team’s skills and abilities, and find efficiencies
• Financial industry/insurance industry experience a plus
• In-house experience is a must
• Knowledgeable about GLBA, NYDFS, CCPA
• Privacy and tech contracting; Incident management experience a must