Senior Counsel - AI, Privacy & Security Legal (Hybrid)

About the role

Provide legal advice to the organization on complex legal issues for artificial intelligence (AI), privacy and cybersecurity, as well as serving as the primary attorney for AI guidance and governance. Provide guidance within assigned practice area(s) to in-house constituents.

Responsibilities

• Work on complex legal issues where analysis requires identification and evaluation of multiple factors.
• Manage legal matters provided to a number of in-house constituents within practice area(s).
• Exercise independent judgment regarding legal advice with limited supervision of more senior attorneys.
• Negotiate discrete disputes within practice area(s).
• Review and draft documents and templates within practice area(s).
• Serve as the primary legal advisor for enterprise AI guidance and governance, counseling on responsible AI, AI risk management, and legal/regulatory compliance across the AI lifecycle (use case intake, development, procurement, deployment, monitoring, and retirement).
• Advise on AI-related risk issues, including automated decision-making, bias/fairness, transparency/notice, explainability, human oversight, and consumer disclosures, and help establish legally appropriate guardrails.
• Negotiate and advise on contracts and provisions related to AI, privacy, and cyber security, including AI and cloud services, software licensing, data processing agreements, and AI development contracts.
• Develop and maintain guidance and governance documentation related to AI, privacy, and cyber security, including policies, standards, procedures, frameworks, playbooks, and approval workflows for AI and privacy use cases.
• Conduct legal research, monitor, review and analyze proposed legislation, assess applicability and operational impacts, and assist business in understanding the requirements and impact.
• Coordinate legal matters handled by outside counsel.
• May provide input into the selection of outside counsel from preselected counsel list.
• Participate in and may lead departmental and cross-functional working groups in identified areas of legal expertise or development.
• May manage and/or mentor junior attorneys or paralegals and help scale legal support for AI, privacy and cybersecurity legal reviews and governance.

Qualifications

• JD from an ABA accredited law school
• Five years of relevant legal experience, including significant experience advising on technology, privacy/security, and AI or automated decision-making matters
• Demonstrated ability to build, implement, or operate governance programs
• Licensed or eligible to practice in the applicable state
• Certified Information Privacy Professional (CIPP), AI Governance Professional (AIGP) or comparable certifications and experience
• Ability to effectively communicate, both written and oral, with the intended audience
• Ability to exercise sound judgment in a fast-paced environment
• Ability to exercise agility and adaptability in providing legal advice
• Extensive knowledge of privacy and security legal principles, laws and regulations, such as HIPAA, GLBA, NY DFS Cybersecurity rules and regulations, California Consumer Privacy Act (CCPA), etc.
• Strong understanding of AI legal principles, laws, and regulations, such as the EU AI Act, state AI/algorithmic accountability laws (including Colorado), FTC guidance, NAIC AI guidance, and other regimes related to automated decision-making and consumer transparency, etc.
• Comfortable in a rapidly changing corporate environment
• Proficient using MS Office

Preferred Qualifications

• Experience building or leading an AI governance program (in-house, in a regulated industry, or at a law firm advising enterprise clients)
• Experience advising on generative AI use (including prompt governance, output review, human oversight, and IP/copyright considerations)
• Experience with third-party AI/vendor due diligence, including security and privacy assessments, audit rights, and model/data ownership terms
• Experience supporting regulatory inquiries/examinations related to technology, data, AI, or consumer protection
• Background partnering with data science/engineering teams or prior technical training (coursework, certifications, or equivalent experience)