Senior Associate General Counsel, Privacy

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Senior Associate General Counsel, Privacy based in United States.

This senior legal role will lead the development and execution of a comprehensive privacy and data protection program across a highly regulated financial services environment. You will shape privacy strategy, governance, policies, and operational processes while partnering closely with Compliance, Technology, People, Marketing, and executive leadership. The role has a strong focus on emerging AI use cases, data protection, regulatory readiness, and responsible data management. You will advise stakeholders on complex legal and technical issues and translate them into practical business guidance. Success requires strong executive presence, strategic thinking, and the ability to balance regulatory risk with business objectives. This is an opportunity to play a central role in strengthening privacy practices while supporting responsible innovation and organizational growth.

\n

Accountabilities:

• Define and execute an enterprise-wide privacy strategy aligned with business priorities, regulatory requirements, and industry best practices.
• Lead compliance with global privacy and data protection requirements, including SEC Regulation S-P, GLBA, CCPA/CPRA, GDPR, PIPEDA, and applicable state privacy laws, while monitoring regulatory developments and organizational readiness.
• Develop, maintain, and enforce privacy policies, standards, data-handling procedures, and compliance metrics across the organization.
• Lead privacy risk assessments, Data Protection Impact Assessments (DPIAs), vendor privacy reviews, audits, gap assessments, and remediation initiatives.
• Develop AI-specific privacy policies and controls covering data input restrictions, redaction, anonymization, retention, secure storage, access management, monitoring, and employee training.
• Oversee data protection operations, including data subject rights, consent management, retention and deletion, privacy-by-design, breach response, and appropriate use of data in AI applications.
• Support the management of privacy incidents by coordinating with security, communications, and other relevant teams.
• Partner with Compliance, Technology, People, Marketing, and executive stakeholders to integrate privacy considerations into systems, products, processes, and business strategy.
• Provide clear, concise, and commercially practical legal guidance while representing the privacy function with senior executives and other key stakeholders.

Requirements:

• 10+ years of professional experience in privacy, data protection, compliance, cybersecurity, or a closely related field.
• Deep knowledge of global privacy regulations and frameworks, including GDPR, CCPA/CPRA, the NIST Privacy Framework, and ISO 27701.
• Demonstrated experience building, leading, or scaling enterprise privacy programs.
• Strong understanding of data governance, information security, privacy risk management, and data protection operations.
• Experience working in highly regulated industries such as financial services, healthcare, technology, or government.
• Strong ability to translate complex legal, regulatory, and technical concepts into clear and actionable business guidance.
• Exceptional communication, stakeholder management, leadership, and executive presentation skills.
• Demonstrated ability to lead cross-functional initiatives and influence stakeholders at all organizational levels.
• Strong crisis management and privacy incident response capabilities.
• Strategic mindset with the ability to balance legal and regulatory risk, compliance obligations, and business needs.
• J.D. from an accredited law school is highly preferred.
• Privacy certifications such as CIPP/E, CIPP/US, CIPM, CIPT, or an equivalent credential are highly preferred.
• Availability during standard business hours, Monday through Friday, 8:00 AM to 5:00 PM, with occasional early or late hours depending on business requirements and deadlines.

Benefits:

• Base salary of $190,000–$210,000 USD, plus eligibility for incentive compensation.
• Remote work with the ability to work from a dedicated professional home-office environment.
• Company-paid basic life and AD&D insurance.
• Company-paid short-term and long-term disability insurance.
• Medical coverage through Cigna, including High Deductible Health Plans and a traditional co-pay plan; Kaiser options are available in California.
• Health Savings Account (HSA) with company contributions when enrolled in an eligible HDHP.
• Two comprehensive dental plan options and vision insurance.
• Supplemental life and AD&D, short-term disability, accident, critical illness, and hospital indemnity coverage.
• Dependent Care Savings Account.
• 14 company-paid holidays, including a full week off at Thanksgiving.
• Generous paid time off for vacation and sick days.
• Employee Assistance Plan and Family Medical Leave.
• 8 weeks of paid parental leave, with additional maternity benefits supporting recovery and bonding time.
• Adoption assistance reimbursement program.
• Company-paid concierge services supporting a range of family and caregiving needs.
• Traditional and Roth 401(k) retirement plans with per-pay-period matching and an after-tax option.
• Pet insurance.
• Personalized financial planning and guidance from internal professionals at preferred employee pricing.

\n

How Jobgether works:

We use an AI-powered matching process to ensure your application is reviewed quickly, objectively, and fairly against the role's core requirements. Our system identifies the top-fitting candidates, and this shortlist is then shared directly with the hiring company. The final decision and next steps (interviews, assessments) are managed by their internal team.

We appreciate your interest and wish you the best!

 Why Apply Through Jobgether? 

Data Privacy Notice: By submitting your application, you acknowledge that Jobgether will process your personal data to evaluate your candidacy and share relevant information with the hiring employer. This processing is based on legitimate interest and pre-contractual measures under applicable data protection laws (including GDPR). You may exercise your rights (access, rectification, erasure, objection) at any time.

#LI-CL1