Privacy Disasters
Featured Job Postings
Senior Vice President, Privacy and Data Protection
Universal Music Group
Privacy
20 days ago
Santa Monica, CA
Preferred Certifications
CIPP/US
CIPP/E
CIPP/C
This job is CIPP/US preferred. Want to improve your chance of landing this job?
Learn More
How We LEAD:
The Senior Vice President, Privacy & Data Protection is a senior executive leader responsible for establishing and overseeing Universal Music Group’s global privacy, data protection, and data governance strategy. This role provides enterprise-level leadership to ensure that privacy and data protection are embedded into UMG’s business strategy, digital transformation, and global operations in a manner that supports artists, creators, partners, and fans worldwide.
As a public company executive, the SVP serves as a key advisor to the Chief Compliance Officer, General Counsel, executive leadership team with responsibility for identifying, managing, and communicating material privacy and data protection risks. The role ensures compliance with applicable global privacy laws and regulatory expectations while enabling innovation, commercial growth, and responsible use of data across UMG’s labels, platforms, and services.
The SVP leads a global, risk-based privacy program grounded in best practices, regulatory accountability, and strong governance, balancing global consistency with the realities of UMG’s decentralized, multi-territory operating model.
How You’ll CREATE:
- Set and execute UMG’s global privacy and data protection vision, aligning privacy governance with corporate strategy, digital initiatives, and evolving regulatory and market expectations.
- Own enterprise-wide privacy risk management, including identification, assessment, mitigation, and escalation of material risks to senior management.
- Serve as the executive point of accountability for privacy compliance across UMG’s global operations, including GDPR, U.S. federal and state laws, and other international data protection regimes.
- Oversee governance of privacy incidents and data breaches, ensuring timely escalation, regulatory notifications, remediation, and post-incident reporting consistent with public-company obligations.
- Direct global privacy audits, monitoring, and assurance activities, ensuring consistent execution across territories, labels, and business units.
- Provide executive oversight of third-party data and privacy risk, including strategic partners, vendors, platforms, and technology providers.
- Track and assess global regulatory developments and enforcement trends, advising executive leadership on business impact, risk exposure, and strategic response.
- Partner closely with technology, product, digital, security, and commercial leadership to embed privacy-by-design and responsible data use into UMG’s products, platforms, and artist-facing services.
- Guide and oversee negotiation of complex data protection and data usage provisions in high-impact commercial agreements, including DPAs, licensing arrangements, and strategic partnerships.
- Build, lead, and mentor a global privacy organization, fostering collaboration across legal, compliance, security, and business teams in a fast-moving, creative environment.
- Champion continuous improvement of policies, controls, and processes, ensuring scalable governance that supports UMG’s global footprint while respecting local regulatory and cultural requirements.
Bring Your VIBE:
- 15+ years of progressive experience in privacy, data protection, regulatory law, or related fields at a top-tier law firm, multinational organization, or equivalent; CIPP certification strongly preferred.
- Deep expertise in GDPR and U.S. federal and state privacy laws, with demonstrated experience operating across multiple international jurisdictions.
- Proven experience leading global privacy programs in complex, matrixed, and decentralized organizations.
- Strong executive presence and credibility, with experience advising C-suite leaders on regulatory risk, governance, and compliance matters.
- Strategic, business-oriented judgment, with the ability to balance legal risk, innovation, and commercial imperatives in a creative, artist-centered business.
- Exceptional leadership and collaboration skills, with a track record of influencing senior stakeholders across diverse business units.
- Outstanding communication, analytical, and drafting skills, including the ability to translate complex regulatory issues into clear, actionable guidance for senior leadership.
Senior Manager, Privacy Architect
AirBnB
AI Governance
23 days ago
United States
Preferred Certifications
CIPP/US
CIPP/E
CIPP/C
CIPM
AIGP
This job is AIGP preferred. Want to improve your chance of landing this job?
Learn More
Airbnb was born in 2007 when two hosts welcomed three guests to their San Francisco home, and has since grown to over 5 million hosts who have welcomed over 2 billion guest arrivals in almost every country across the globe. Every day, hosts offer unique stays and experiences that make it possible for guests to connect with communities in a more authentic way.
The Community You Will Join:
At Airbnb, privacy isn’t just a requirement—it’s the cornerstone of our commitment to trust and belonging. As our growth accelerates through AI-powered personalization and innovative social features, privacy takes on new importance—fueling our ability to deliver magical, personalized experiences while ensuring our users feel safe, respected, and in control. We aim to set ourselves apart from the competition—creating world-class, privacy-forward personalization that earns user loyalty and mitigates risk.
The Difference You Will Make:
We are looking for a Senior Manager, Privacy Architect to join our Privacy & Data Security Team. Someone with deep privacy expertise and a strong technical background, including extensive experience in data governance/management, compliance on big data architectures, and knowledge of Privacy Enhancing Technologies (PETs), AI/ML technologies, and the AI/ML lifecycle. This role will work closely with the Chief Privacy Officer, Legal, and other Privacy & Data Security Team members, as well as engineering and data science teams. Responsibilities include leading high-impact initiatives and defining technical requirements for compliance and the responsible use of technology at Airbnb.
About You:
- Deep knowledge of current privacy and technology trends, with a strong passion for data governance/management and AI/ML.
- Demonstrated experience in ensuring privacy-by-design principles are applied throughout the design, construction, and operation of digital products and services at scale.
- Proven track record in translating legal requirements into actionable technical measures and guidelines that enable responsible and rapid innovation within engineering and data science teams.
- Self-starter who can work autonomously with limited guidance, analyzing information to evaluate quality and applying creative thinking to decision-making.
- Comfortable performing under pressure to meet deadlines in an ambiguous, matrixed organization.
- Strong organizational and motivational skills, coupled with a bias for action.
- Proven track record of collaborating effectively with cross-functional teams, including legal and engineering, and leading complex projects to desired outcomes without requiring formal authority.
- Outstanding communicator with proven expertise in facilitation and influence, adept at engaging diverse audiences and effectively communicating across all levels—including the executive team—to drive alignment and informed decision making.
- Sense of urgency and commitment to Airbnb's mission of belonging.
- Experience in multiple roles, including working with senior leaders.
A Typical Day:
- Collaborate with technical teams in the identification and effective management of company-wide risks to privacy and the responsible use of technology, and support stakeholders in the development and execution of initiatives to address them.
- Lead definition and implementation of company-wide standards, practices, and patterns to protect and manage personal data in accordance with privacy and AI regulations.
- Work with Legal, Data Science, Data Governance, and InfoSec to introduce Privacy by Design principles in company products and infrastructure, including by leveraging privacy enhancing technologies such as cryptography and anonymization of personal data.
- Create privacy training for technical roles, including data engineers, developers, and data scientists.
Your Expertise:
- 15+ years of total experience, with 5+ years of experience in technical program/project management or privacy engineering focused on building technology products and/or systems.
- Deep understanding of large-scale, “Big Data” data stores and technologies. This includes experience working with data governance/management teams to improve data annotations, lineage and ACLs to drive automation of privacy and compliance requirements through technology, data quality overall and process improvements in data systems at scale.
- Strong familiarity with the AI/ML development lifecycle: from data collection and curation, through model architecture selection, training, testing, A/B testing, and deployment. Must be adept at managing compliance and responsible use challenges throughout this lifecycle.
- Solid understanding of Large Language Models (LLMs), Generative AI and AI Agents, including compliance and responsible use challenges arising from their deployment in B2C services, including the techniques used to train, fine-tune, and deploy these technologies to production.
- Strong familiarity with Privacy Enhancing Technologies (PETs), such as various types of encryption, de-identification methods (e.g., k-anonymity, differential privacy), and AI/ML interpretability techniques (e.g., SHAP, LIME).
- Ability to rapidly absorb and apply new technologies and knowledge correctly within the context of regulatory requirements.
- Strong time management and prioritization skills, effectively allocating time and resources to achieve objectives and balancing multiple tasks while ensuring high-quality outputs.
- Demonstrated ability to navigate ambiguity to achieve goals. Self-motivated, proactive, and capable of adapting to and working with teams operating on different cadences.
- Sound business judgment, proven ability to influence others, strong analytical skills, and a track record of taking ownership, leading data-driven analyses, and influencing results.
- Experience in developing processes from scratch and demonstrated flexibility to successfully execute tasks.
- Detail-oriented, yet able to synthesize the bigger picture, leveraging technical and privacy expertise and problem-solving abilities to prioritize and manage blocking issues.
- Experience working in a highly cross-functional environment (e.g., Engineering, PM, Data Science, Analytics, Design, Operations, Legal, Infrastructure), where the ability to communicate with and influence multiple groups and executive teams is imperative.
- Excellent written and oral business communication and people skills, with the capacity to influence diverse stakeholders at all levels.
- Familiarity with common privacy processes and deliverables (e.g., privacy impact assessments, records of processing). Hands-on experience applying privacy frameworks and a comprehensive understanding of major regulations such as GDPR and CCPA.
Preferred skill-sets:
- 15+ years of total experience, with 7+ years of experience in privacy, trust & safety, compliance, security operations, and technical program management, preferably within a global B2C technology company.
- Professional certifications such as Certified Information Privacy Professional (CIPP), Certified Information Privacy Manager (CIPM), or AI Governance Professional (AIGP) or equivalent, are preferred but not required.
- BA/BS and/or advanced degree in engineering, computer science, mathematics, statistics, physics, or a related field.
- Experience with programming languages and tools commonly used in AI, such as R, Python and Github.
Your Location:
This position is US - Remote Eligible. The role may include occasional work at an Airbnb office or attendance at offsites, as agreed to with your manager. While the position is Remote Eligible, you must live in a state where Airbnb, Inc. has a registered entity. Click here for the up-to-date list of excluded states. This list is continuously evolving, so please check back with us if the state you live in is on the exclusion list If your position is employed by another Airbnb entity, your recruiter will inform you what states you are eligible to work from.
Our Commitment To Inclusion & Belonging:
Airbnb is committed to working with the broadest talent pool possible. We believe diverse ideas foster innovation and engagement, and allow us to attract creatively-led people, and to develop the best products, services and solutions. All qualified individuals are encouraged to apply.
We strive to also provide a disability inclusive application and interview process. If you are a candidate with a disability and require reasonable accommodation in order to submit an application, please contact us at: reasonableaccommodations@airbnb.com. Please include your full name, the role you’re applying for and the accommodation necessary to assist you with the recruiting process.
We ask that you only reach out to us if you are a candidate whose disability prevents you from being able to complete our online application.
How We'll Take Care of You:
Our job titles may span more than one career level. The actual base pay is dependent upon many factors, such as: training, transferable skills, work experience, business needs and market demands. The base pay range is subject to change and may be modified in the future. This role may also be eligible for bonus, equity, benefits, and Employee Travel Credits.
Sign Up for Weekly Job Alerts
Have the latest Privacy and AI governance job postings delievered to your inbox every week
Privacy and AI Counsel
Lyra Health
AI Governance
Today
United States
Preferred Certifications
CIPP/US
AIGP
This job is AIGP preferred. Want to improve your chance of landing this job?
Learn More
About the Role
You will be a critical member of Lyra’s growing legal team, within its US Privacy division, supporting internal stakeholders in fulfilling Lyra’s mission to bring mental and emotional health solutions to large employers across the country and around the world.
This is a full-time remote role and will report to Lyra’s Sr. Director, Associate General Counsel - Global Privacy, and work closely in the US with the Privacy Counsel, US, the Sr. Privacy Manager, and the Senior Privacy Paralegal. The role will also involve working with the Privacy Counsel, International and the Data Protection Specialist, who are both based in the UK.
You will be expected to work independently in managing questions around a broad scope of privacy issues, conducting legal research, counseling internal stakeholders to resolve privacy questions, and leading projects to support the growth of both Lyra’s privacy program and AI governance.
A significant portion of this role will be dedicated to AI-related work, including completing reviews of AI use cases (for example, relating to generative AI and agentic AI), and advising on AI-powered products, services, and tools.
The ideal candidate will be a passionate privacy attorney with a proactive nature, and an enthusiasm for new technologies, such as AI, and their governance, and someone who is searching for a collaborative environment brimming with novel questions.
The privacy division of Lyra’s legal team plays an essential role at the company, responding to and managing complex privacy and AI questions and establishing a framework to support legal and programmatic privacy and AI initiatives. Experienced candidates are welcome to join our dynamic and passionate team.
Responsibilities
-
Support Lyra’s privacy program and advise internal stakeholders on privacy concerns related to Lyra’s products and services, and the implementation of new technologies, such as AI.
-
As a core component of the role, participate extensively in AI use case reviews, including those involving generative AI and agentic AI for internal use at Lyra, and in legal reviews and assessments relating to the development by Lyra of AI-powered products, services, and tools. Drive the AI use case review process forward to meet established SLAs, ensuring the business remains agile.
-
Draft, maintain, and evolve AI governance documentation, including the Company’s Responsible AI Policy and related standards, procedures, and guidance.
-
Coordinate with internal teams to ensure corporate adherence to applicable state and federal privacy laws, including, but not limited to, CCPA and HIPAA.
-
Stay abreast of, analyze, and advise on evolving US laws and regulations relating to privacy and AI at both the state and federal level. Update the legal team and the business on relevant new regulatory requirements and feed into policy and procedural documentation.
-
Support international AI regulatory compliance by partnering with the Privacy Counsel, International on the EU AI Act and other global AI regulations, including leading horizon scanning efforts and proactively delivering insights and updates to the legal team and broader Lyra business.
-
Collaborate with commercial counsel to ensure that privacy provisions in commercial agreements and Business Associate Agreements (BAAs) appropriately manage risk and comply with privacy policies, laws, rules, regulations, and company objectives.
-
Review BAAs negotiated by commercial counsel and document data use permissions for new and existing customers.
-
Work cross-functionally to advise product and business teams on potential privacy and AI regulatory implications of Lyra’s new and existing product lines, including reviewing and approving product requirement documents (PRDs).
-
Investigate, manage, document and report privacy incidents, including breaches, in accordance with applicable law, contractual requirements and corporate strategy.
-
Participate in cross-functional teams working on AI governance and AI use case reviews.
-
Other duties as assigned.
Qualifications
-
Law degree from top-tier law school and membership in a state bar with good standing.
-
A minimum of 3 to 5 years legal experience in-house or at a law firm.
-
Experience analyzing and advising on health care privacy laws on the state and federal level; implementation of CCPA or GDPR programs a plus, as is experience advising on AI regulation and governance.
-
Excellent problem-solving capabilities, judgment, communication (written and verbal), and interpersonal skills.
-
Experience leading projects, including collecting, distilling and summarizing issues from relevant stakeholders and moving projects forward.
-
Experience in solving product legal matters, including communicating and collaborating effectively with stakeholders with a wide range of legal and technical experience and knowledge.
-
Ability to balance technical AI legal advice with operational process management.
-
Experience working in-house with a technology company and/or health care organization strongly preferred.
-
Ability to thrive in a high-performance culture, with strong prioritization skills, and the ability to manage multiple competing demands effectively.
-
Strong background in Data Privacy coupled with significant, hands-on AI experience.
-
AI-related professional certification (e.g., IAPP Artificial Intelligence Governance Professional (AIGP)) or equivalent professional study relating to AI.
-
Privacy-related professional certification (e.g., IAPP CIPP/US).
-
Experience of new US state AI regulation, for example:
-
California
-
Colorado
-
Texas
-
Illinois
-
New York (including NYC)
-
Utah.
-
Ability to think quickly on your feet, convey grace under pressure, and manage shifting priorities.
-
Ability to operate autonomously, yet collaboratively, apply good judgment as to when to escalate issues to senior members of the team,
-
Bring a positive attitude to the workplace.
-
Sense of humor.
Preferred qualifications, experience and attributes
Regulatory Counsel, Content & Frontier AI Regulation
Anthropic
AI Governance
1 day ago
Dublin, IE
Preferred Certifications
About Anthropic
Anthropic’s mission is to create reliable, interpretable, and steerable AI systems. We want AI to be safe and beneficial for our users and for society as a whole. Our team is a quickly growing group of committed researchers, engineers, policy experts, and business leaders working together to build beneficial AI systems.
About the role
Anthropic is seeking a Regulatory Counsel to lead our legal work on online content regulation globally, and to interface with EU regulators on content regulation and AI regulation. Our international footprint covers some material regulatory regimes affecting Anthropic's business, including the EU AI Act, Digital Services Act, the UK Online Safety Act, and the rapidly evolving online-content regimes emerging across APAC and other international markets.
You will provide upfront regulatory-readiness counselling as new laws are developed and implemented, ongoing day-to-day advice once those laws are in force, and lead the non-contentious side of Anthropic's engagement with regulators. You will sit at the intersection of novel legal questions, fast-moving product development, and an unusually engaged regulatory environment, and will work cross-functionally with Legal, Compliance, Safeguards, Security, Product and Operations teams.
Key responsibilities
- Serve as Anthropic's global in-house regulatory counsel for online content regulation — including the DSA, the UK Online Safety Act, Australia's Online Safety Act, and emerging APAC and other international regimes — covering applicability analysis, readiness, day-to-day advice, and compliance-programme design and maintenance.
- Support the non-contentious side of Anthropic's regulatory engagement with European regulators on content regulation and AI regulations — including with the European AI Office, the European Commission, national AI competent authorities, Digital Services Coordinators, Ofcom, and their counterparts internationally — including notifications, structured dialogues, RFIs, transparency reporting, and codes-of-practice processes.
- Provide upfront regulatory-readiness counselling on emerging legislation: track legislative and supervisory developments across international markets, assess applicability and impact on Anthropic's business and products, identify implementation risks, and design compliance approaches well in advance of obligations taking effect
- Provide ongoing advice once laws are in force: counsel legal, compliance and business teams on day-to-day regulatory questions, translate complex requirements into practical guidance, and help build and maintain scalable compliance programmes
- Partner with Frontier AI Regulatory Counsel on EU AI Act engagement, translating Anthropic's frontier-AI compliance positions into regulator-facing submissions and bringing regulator expectations back into our substantive work
- Partner closely with Anthropic's Policy Legal team to support pre-legislative engagement, identify implementation challenges, and translate policy positions into legally-grounded regulatory submissions
- Work with colleagues across Legal and Compliance to design and operationalise governance, documentation, risk-management and reporting frameworks required by international content laws
- Coordinate with regional and global counterparts to ensure a consistent global regulatory posture while respecting jurisdiction-specific requirements
Minimum qualifications
- Qualification to practise law in at least one EU member state or in the UK, with good standing
- Substantive depth in international content regulation (DSA, UK Online Safety Act, or similar)
- Hands-on experience advising a technology business (in-house or at a leading law firm) on emerging regulatory regimes, including translating ambiguous or evolving rules into practical, defensible compliance approaches
- Direct experience engaging with regulators or supervisory bodies in a non-contentious capacity (e.g. the European AI Office, European Commission, national AI competent authorities, Digital Services Coordinators, Ofcom, or equivalent international supervisors)
- Strong understanding of how EU law-making and supervisory practice actually works, including delegated and implementing acts, guidelines, codes of practice, and the interplay between EU- and member-state-level enforcement
- Strong cross-functional collaboration skills and the ability to communicate complex legal concepts clearly to technical, policy, product and business audiences
- Willingness to travel internationally as needed to support regulatory engagement
Preferred qualifications
- 10–12 years of regulatory legal experience working at a frontier AI company, large online platform, or other high-growth technology business operating under DSA, OSA, EU AI Act or equivalent international regimes
- Experience contributing to industry codes of practice, regulator-led structured dialogues, or trade association engagement on AI or content regulation
- Familiarity with adjacent regimes that frequently intersect with content regulation internationally, e.g. privacy, copyright, product safety, and consumer protection
- A track record of building constructive long-term relationships with regulators
- Comfort with ambiguity and a track record of developing novel compliance approaches in areas without established precedent
- A passion for responsible AI development and for getting the balance right between innovation and appropriate safeguards
Role-specific policy: For this role, we expect all staff to be able to work from our Dublin office at least 3 days a week, though we encourage you to apply even if you might need some flexibility for an interim period of time.
The annual compensation range for this role is listed below.
For sales roles, the range provided is the role’s On Target Earnings ("OTE") range, meaning that the range includes both the sales commissions/sales bonuses target and annual base salary for the role.
Logistics
Minimum education: Bachelor’s degree or an equivalent combination of education, training, and/or experience
Required field of study: A field relevant to the role as demonstrated through coursework, training, or professional experience
Minimum years of experience: Years of experience required will correlate with the internal job level requirements for the position
Location-based hybrid policy: Currently, we expect all staff to be in one of our offices at least 25% of the time. However, some roles may require more time in our offices.
Visa sponsorship: We do sponsor visas! However, we aren't able to successfully sponsor visas for every role and every candidate. But if we make you an offer, we will make every reasonable effort to get you a visa, and we retain an immigration lawyer to help with this.
We encourage you to apply even if you do not believe you meet every single qualification. Not all strong candidates will meet every single qualification as listed. Research shows that people who identify as being from underrepresented groups are more prone to experiencing imposter syndrome and doubting the strength of their candidacy, so we urge you not to exclude yourself prematurely and to submit an application if you're interested in this work. We think AI systems like the ones we're building have enormous social and ethical implications. We think this makes representation even more important, and we strive to include a range of diverse perspectives on our team.
Your safety matters to us. To protect yourself from potential scams, remember that Anthropic recruiters only contact you from @anthropic.com email addresses. In some cases, we may partner with vetted recruiting agencies who will identify themselves as working on behalf of Anthropic. Be cautious of emails from other domains. Legitimate Anthropic recruiters will never ask for money, fees, or banking information before your first day. If you're ever unsure about a communication, don't click any links—visit anthropic.com/careers directly for confirmed position openings.
How we're different
We believe that the highest-impact AI research will be big science. At Anthropic we work as a single cohesive team on just a few large-scale research efforts. And we value impact — advancing our long-term goals of steerable, trustworthy AI — rather than work on smaller and more specific puzzles. We view AI research as an empirical science, which has as much in common with physics and biology as with traditional efforts in computer science. We're an extremely collaborative group, and we host frequent research discussions to ensure that we are pursuing the highest-impact work at any given time. As such, we greatly value communication skills.
The easiest way to understand our research directions is to read our recent research. This research continues many of the directions our team worked on prior to Anthropic, including: GPT-3, Circuit-Based Interpretability, Multimodal Neurons, Scaling Laws, AI & Compute, Concrete Problems in AI Safety, and Learning from Human Preferences.
Come work with us!
Anthropic is a public benefit corporation headquartered in San Francisco. We offer competitive compensation and benefits, optional equity donation matching, generous vacation and parental leave, flexible working hours, and a lovely office space in which to collaborate with colleagues. Guidance on Candidates' AI Usage: Learn about our policy for using AI in our application process
AI Advisor
TRU Staffing Partners (Agency)
AI Governance
1 day ago
Anywhere | United States
Preferred Certifications
- Act as a credible, authoritative advisor on AI workflow and integration strategy, guiding attorneys on where and how AI can add value across their practices.
- Embed within litigation and transactional practice groups to document current-state workflows with sufficient specificity to drive enhanced design translating attorney tasks and needs into scoped requirements and flagging opportunities to leverage existing builds or address known failure points.
- Support client engagements by partnering with practice teams to deliver AI-assisted legal services directly to clients, maintaining the quality and professional standards expected in client-facing work.
- Champion responsible AI adoption by ensuring attorneys understand generative AI capabilities, limitations, and firm governance requirements.
- Coordinate tasks, timelines, and stakeholders for AI workflow development initiatives.
- Own end-to-end AI legal workflow development, decomposing complex legal tasks, designing and testing prompts, aligning outputs to firm standards, and iterating rapidly across platforms.
- Design and execute testing protocols, including prompt engineering, output benchmarking, and iterative attorney-driven refinement, while maintaining structured decision logs that capture each workflow's task requirements, prompt logic, validation criteria, failure modes, and platform constraints with sufficient specificity to reconstruct workflows on future infrastructure.
- Partner with engineers as workflows mature, bridging attorney domain knowledge and technical execution while building deeper technical fluency through exposure to pipeline design and failure analysis.
- Contribute to a scalable AI workflow playbook codifying best practices, templates, decision trees, and implementation guides.
- Provide informed recommendations on AI tools, capabilities, and roadmaps grounded in direct legal practice experience. Proactively share learnings and emerging patterns across the team.
- Collaborative across training and development teams to design and deliver attorney training programs-including demonstrations, user guides, and feedback mechanisms-for effective AI tool use and workflow adoption.
- Track and report project status, adoption metrics, and outcomes to Innovation leadership.
- Stay current on AI developments, regulatory changes, and industry best practices.
- A J.D. from an accredited law school is strongly preferred; however, candidates who do not hold a law degree but possess significant demonstrated experience leading innovation initiatives, driving technology adoption, or overseeing AI implementation at a large law firm or legal technology company will also be given strong consideration.
- Comfort operating in a billable, client-service environment, with an understanding of the pace, quality expectations, and confidentiality requirements associated with delivering work product directly to clients.
- Strong aptitude for process improvement and legal technology, including generative AI/large language models with sufficient understanding of where AI succeeds and fails to engage both legal teams and engineers.
- Direct experience with legal AI platforms (Harvey, Legora, CoCounsel, Lexis+ AI, or comparable), including hands-on building and iterating on prompts and workflows with accountability for output quality.
- Ability to collaborate with attorneys and leadership at all levels, establishing credibility with senior stakeholders and influencing decisions in fast-moving, ambiguous environments with firsthand understanding of attorney pressures, pace and quality expectations.
- Strong writing, project management, and organizational skills with sound judgment, able to manage multiple concurrent initiatives, lead and document design calls, translate technical concepts for varied audiences, and independently advance priorities.
- Collaborative and adaptable team player who tackles challenges with initiative, creativity, and accountability, bringing a client-focused, solutions-oriented mindset.
- J.D. from an accredited law school.
- Some experience as an attorney at an AMLAW 50 firm or comparable legal environment.
- Experience training legal teams on new tools, including developing educational materials or governance policies.
- Knowledge of data security, information governance, and compliance best practices for AI and legal technology.
Data Scientist (Litigation)
TRU Staffing Partners (Agency)
AI Governance
1 day ago
Anywhere | United States
Preferred Certifications
- Some experience in a law firm, legal services, or professional services organization with significant experience working in a team environment.
- Ability to translate complex concepts into client-friendly language.
- Highly analytical with strong problem-solving skills and the ability to translate ambiguous problems into structured solutions.
- Knowledge of statistical analysis and data modeling.
- Demonstrated hands-on experience with Relativity custom development. Deep knowledge in eDiscovery-focused data processing, structured analytics, and related troubleshooting.
- Expert-level proficiency in Microsoft Excel, including VBA development, Power Query, complex formula construction, advanced data modeling, and chart design.
- Experience in creating data visualizations with hands-on proficiency in tools such as Plotly, Tableau, and Microsoft Power BI.
- Strong Python skills for data analysis, statistical modeling, and AI/ML prototyping (e.g., pandas, PyTorch, TensorFlow); advanced SQL proficiency; experience building data pipelines.
- Proficiency in front-end web technologies including JavaScript, HTML, and CSS, with the ability to develop interactive web-based tools and dashboards.
- Hands-on experience with AI platforms and tools (e.g., OpenAI, Microsoft Azure OpenAI, Hugging Face, LangFlow, LangChain), including practical implementation of RAG pipelines, vector databases, and knowledge graph construction.
- General knowledge of social network analysis, natural language processing, classification algorithms, and image processing.
- Familiarity with git, svn, JIRA, or other version control technologies.
- Familiarity with hardware platforms (e.g., CPUs, GPUs, FPGAs).
- Bachelor’s degree.
- Familiarity with leading legal technology platforms is preferred (docketing systems, document management systems, case management systems, eDiscovery, data collection and web capture solutions).
- Experience evaluating LLM output quality through benchmarking, precision, recall, and extraction accuracy assessment is preferred.
Privacy Compliance Manager
FanDuel
Privacy
2 days ago
New York City
Preferred Certifications
CIPP/US
CIPP/E
CIPM
CIPT
This job is CIPP/US preferred. Want to improve your chance of landing this job?
Learn More
THE POSITION
Our roster has an opening with your name on it
FanDuel Group is looking to add a Privacy Manager to support and enhance our global privacy program. This role will be responsible for maintaining and maturing FanDuel’s privacy compliance framework, ensuring adherence to evolving legal, regulatory, and internal requirements across multiple jurisdictions.
The Privacy Manager will report into the Corporate Compliance Senior Manager within FanDuel Group’s Legal and Compliance function. This role will drive execution of key privacy initiatives, including Privacy Impact Assessments, privacy rights request, third-party risk management, and own relationships with privacy management platforms. The position will partner closely with Legal, Technology, Procurement,
Flutter Group and other business stakeholders to embed privacy-by-design across new and existing products.
The ideal candidate for this role brings strong experience in privacy program development, operational execution, and stakeholder management. Success in this role requires excellent analytical, communication, and problem-solving skills, along with a high level of attention to detail, ownership, and the ability to thrive in a fast-paced, highly regulated environment.
In addition to the specific responsibilities outlined above, employees may be required to perform other such duties as assigned by the Company. This ensures operational flexibility and allows the Company to meet evolving business needs.
THE GAME PLAN
Everyone on our team has a part to play
This position will work cross-functionally with Legal, Compliance, Technology, Product, and business teams to strengthen and scale FanDuel’s privacy program. This role requires someone who is committed to fostering a culture of privacy and responsible data use. This role will execute on the following:
Privacy Program & Governance:
- Maintain and enhance the privacy compliance framework, including policies, procedures, and taxonomy to align with regulatory and internal requirements.
- Coordinate activities across the three lines of defense, including internal audit, compliance testing, external reviews, and preparation of privacy reporting.
- Own and mature Privacy Impact Assessment (PIA) processes, including deeper integration with business change management protocols.
- Develop and manage reporting for privacy KRIs, control metrics, and risk and compliance dashboards.
- Oversee and optimize FanDuel’s privacy management platform, including data discovery, classification, third-party inventories, and automation of privacy rights requests.
- Establish and maintain a structured privacy horizon-scanning process to track regulatory developments and emerging risks.
- Develop and deliver privacy training and awareness initiatives across the organization.
Privacy Operations:
- Conduct and oversee PIAs for new products and initiatives, providing risk-based recommendations and mitigation strategies.
- Manage and enhance end-to-end processes for privacy rights requests (e.g., access and erasure), ensuring compliance with statutory requirements and quality standards.
- Advise on privacy due diligence for third-party vendors, including review of vendor RFP responses and vendor risk assessments.
- Serve as a subject matter expert and escalation point for complex privacy matters.
Stakeholder Management & Leadership:
- Build and maintain strong cross-functional relationships and collaborate with stakeholders at all levels of the organization.
- Advise on key organizational efforts such as cookie consent management, data retention strategies, and new product launches across the US and Canada.
- Partner with global colleagues to support standards development, knowledge sharing, and consistent privacy practices.
- Own the reporting obligations required by Canadian government bodies in the development of regulated new product initiatives.
- Work closely with the Privacy Legal team on cross-functional initiatives.
- Provide leadership and mentorship to junior privacy team members, supporting their development and growth.
- Identify opportunities for process improvement, automation, and operational efficiency across privacy workflows.
THE STATS
What we're looking for in our next teammate
- 4–6 years of privacy compliance or data protection experience in a regulated industry (e.g., gaming, financial services, healthcare, or technology)
- Demonstrated experience managing privacy frameworks, PIAs, and privacy rights requests across multiple regulatory regimes (e.g., US, Canada, UK GDPR)
- Experience leading and mentoring team members
- Strong ability to interpret and apply privacy laws, regulations, and policies
- Excellent written and verbal communication skills, with the ability to translate complex privacy concepts for diverse audiences
- Strong attention to detail and analytical skills in assessing data processing activities and risks
- Ability to manage multiple priorities and adapt in a fast-changing regulatory environment
- Proven ability to collaborate effectively across cross-functional teams and influence stakeholders
- Strong problem-solving skills with the ability to independently drive initiatives and deliver practical solutions
- Experience with privacy management tools and platforms, including DSAR and assessment workflows
- Basic understanding of IT, data management and information security principles
- Proficiency in Excel required
- Relevant certifications such as CIPP/US, CIPP/E, CIPM, or CIPT preferred
- A self-starter with strong ownership and follow-through
- Ability to thrive in a fast-paced, high-growth environment
- A collaborative team player with a desire to contribute to and grow within FanDuel Group
ABOUT FANDUEL
FanDuel Group is the premier mobile gaming company in the United States and Canada. FanDuel Group consists of a portfolio of leading brands across mobile wagering including: America’s #1 Sportsbook, FanDuel Sportsbook; its leading iGaming platform, FanDuel Casino; the industry’s unquestioned leader in horse racing and advance-deposit wagering, FanDuel Racing; and its daily fantasy sports product.
In addition, FanDuel Group operates FanDuel TV, its broadly distributed linear cable television network and FanDuel TV+, its leading direct-to-consumer OTT platform. FanDuel Group has a presence across all 50 states, Canada, and Puerto Rico.
The company is based in New York with US offices in Los Angeles, Atlanta, and Jersey City, as well as global offices in Canada and Scotland. The company’s affiliates have offices worldwide, including in Ireland, Portugal, Romania, and Australia.
FanDuel Group is a subsidiary of Flutter Entertainment, the world's largest sports betting and gaming operator with a portfolio of globally recognized brands and traded on the New York Stock Exchange (NYSE: FLUT).
PLAYER BENEFITS
We treat our team right
We offer amazing benefits above and beyond the basics. We have an array of health plans to choose from (some as low as $0 per paycheck) that include programs for fertility and family planning, mental health support, and fitness benefits. We offer generous paid time off (PTO & sick leave), annual bonus and long-term incentive opportunities (based on performance), 401k with up to a 5% match, commuter benefits, pet insurance, and more - check out all our benefits here: FanDuel Total Rewards. *Benefits differ across location, role, and level.
FanDuel is an equal opportunities employer and we believe, as one of our principles states, “We are One Team!”. As such, we are committed to equal employment opportunity regardless of race, color, ethnicity, ancestry, religion, creed, sex, national origin, sexual orientation, age, citizenship status, marital status, disability, gender identity, gender expression, veteran status, or any other characteristic protected by state, local or federal law. We believe FanDuel is strongest and best able to compete if all employees feel valued, respected, and included.
FanDuel is committed to providing reasonable accommodations for qualified individuals with disabilities. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please email Benefits@fanduel.com.
The applicable salary range for this position is $94,000 - $118,000 USD, which is dependent on a variety of factors including relevant experience, location, business needs and market demand. This role may offer the following benefits: medical, vision, and dental insurance; life insurance; disability insurance; a 401(k) matching program; among other employee benefits. This role may also be eligible for short-term or long-term incentive compensation, including, but not limited to, cash bonuses and stock program participation. This role includes paid personal time off and 14 paid company holidays. FanDuel offers paid sick time in accordance with all applicable state and federal laws.
It is unlawful in Massachusetts to require or administer a lie detector test as a condition of employment or continued employment. An employer who violates this law shall be subject to criminal penalties and civil liability.
#LI-Hybrid