Privacy and AI Governance Resources

Recent Articles

Job Postings

Privacy and AI Counsel
Lyra Health

AI Governance

Today

United States

Preferred Certifications

CIPP/US

AIGP

This job is AIGP preferred.
Want to improve your chance of landing this job?

Learn More

About Lyra Health
 
Lyra Health is the leading provider of mental health solutions for employers supporting more than 20 million people globally. The company has delivered 13 million sessions of mental health care, published more than 20 peer-reviewed studies, and delivered unmatched outcomes in terms of access, clinical effectiveness and cost efficiency. Extensive peer-reviewed research confirms Lyra’s transformative care model helps people recover twice as fast and results in a 26% annual reduction in overall healthcare claims costs. Lyra is transforming access to life-changing mental health care through Lyra Empower, the only fully integrated, AI-powered platform combining the highest-quality care and technology solutions.

About the Role

You will be a critical member of Lyra’s growing legal team, within its US Privacy division, supporting internal stakeholders in fulfilling Lyra’s mission to bring mental and emotional health solutions to large employers across the country and around the world.

This is a full-time remote role and will report to Lyra’s Sr. Director, Associate General Counsel - Global Privacy, and work closely in the US with the Privacy Counsel, US, the Sr. Privacy Manager, and the Senior Privacy Paralegal. The role will also involve working with the Privacy Counsel, International and the Data Protection Specialist, who are both based in the UK.

You will be expected to work independently in managing questions around a broad scope of privacy issues, conducting legal research, counseling internal stakeholders to resolve privacy questions, and leading projects to support the growth of both Lyra’s privacy program and AI governance.

A significant portion of this role will be dedicated to AI-related work, including completing reviews of AI use cases (for example, relating to generative AI and agentic AI), and advising on AI-powered products, services, and tools.

The ideal candidate will be a passionate privacy attorney with a proactive nature, and an enthusiasm for new technologies, such as AI, and their governance, and someone who is searching for a collaborative environment brimming with novel questions.

The privacy division of Lyra’s legal team plays an essential role at the company, responding to and managing complex privacy and AI questions and establishing a framework to support legal and programmatic privacy and AI initiatives. Experienced candidates are welcome to join our dynamic and passionate team.

Responsibilities

  • Support Lyra’s privacy program and advise internal stakeholders on privacy concerns related to Lyra’s products and services, and the implementation of new technologies, such as AI.

  • As a core component of the role, participate extensively in AI use case reviews, including those involving generative AI and agentic AI for internal use at Lyra, and in legal reviews and assessments relating to the development by Lyra of AI-powered products, services, and tools. Drive the AI use case review process forward to meet established SLAs, ensuring the business remains agile.

  • Draft, maintain, and evolve AI governance documentation, including the Company’s Responsible AI Policy and related standards, procedures, and guidance.

  • Coordinate with internal teams to ensure corporate adherence to applicable state and federal privacy laws, including, but not limited to, CCPA and HIPAA.

  • Stay abreast of, analyze, and advise on evolving US laws and regulations relating to privacy and AI at both the state and federal level. Update the legal team and the business on relevant new regulatory requirements and feed into policy and procedural documentation.

  • Support international AI regulatory compliance by partnering with the Privacy Counsel, International on the EU AI Act and other global AI regulations, including leading horizon scanning efforts and proactively delivering insights and updates to the legal team and broader Lyra business.

  • Collaborate with commercial counsel to ensure that privacy provisions in commercial agreements and Business Associate Agreements (BAAs) appropriately manage risk and comply with privacy policies, laws, rules, regulations, and company objectives.

  • Review BAAs negotiated by commercial counsel and document data use permissions for new and existing customers.

  • Work cross-functionally to advise product and business teams on potential privacy and AI regulatory implications of Lyra’s new and existing product lines, including reviewing and approving product requirement documents (PRDs).

  • Investigate, manage, document and report privacy incidents, including breaches, in accordance with applicable law, contractual requirements and corporate strategy.

  • Participate in cross-functional teams working on AI governance and AI use case reviews.

  • Other duties as assigned.

Qualifications

  • Law degree from top-tier law school and membership in a state bar with good standing.

  • A minimum of 3 to 5 years legal experience in-house or at a law firm.

  • Experience analyzing and advising on health care privacy laws on the state and federal level; implementation of CCPA or GDPR programs a plus, as is experience advising on AI regulation and governance.

  • Excellent problem-solving capabilities, judgment, communication (written and verbal), and interpersonal skills.

  • Experience leading projects, including collecting, distilling and summarizing issues from relevant stakeholders and moving projects forward.

  • Experience in solving product legal matters, including communicating and collaborating effectively with stakeholders with a wide range of legal and technical experience and knowledge.

  • Ability to balance technical AI legal advice with operational process management.

  • Experience working in-house with a technology company and/or health care organization strongly preferred.

  • Ability to thrive in a high-performance culture, with strong prioritization skills, and the ability to manage multiple competing demands effectively.

  • Preferred qualifications, experience and attributes

  • Strong background in Data Privacy coupled with significant, hands-on AI experience.

  • AI-related professional certification (e.g., IAPP Artificial Intelligence Governance Professional (AIGP)) or equivalent professional study relating to AI.

  • Privacy-related professional certification (e.g., IAPP CIPP/US).

  • Experience of new US state AI regulation, for example:

  • California

  • Colorado 

  • Texas

  • Illinois

  • New York (including NYC)

  • Utah.

  • Ability to think quickly on your feet, convey grace under pressure, and manage shifting priorities.

  • Ability to operate autonomously, yet collaboratively, apply good judgment as to when to escalate issues to senior members of the team, 

  • Bring a positive attitude to the workplace. 

  • Sense of humor.

"We are an Equal Opportunity Employer. We do not discriminate on the basis of race, color, religion, sex (including pregnancy), national origin, age, disability, genetic information or any other category protected by law.
 
By applying for this position, you acknowledge that your personal information will be processed as per the Lyra Health Workforce Privacy Notice. Through this application, to the extent permitted by law, we will collect personal information from you including, but not limited to, your name, email address, gender identity, employment information, and phone number for the purposes of recruiting and assessing suitability, aptitude, skills, qualifications, and interests for employment with Lyra.  We may also collect information about your race, ethnicity, and sexual orientation, which is considered sensitive personal information under the California Privacy Rights Act (CPRA) and special category data under the UK and EU GDPR.  Providing this information is optional and completely voluntary, and if you provide it you consent to Lyra processing it for the purposes as described at the point of collection, for example for diversity and inclusion initiatives.  If you are a California resident and would like to limit how we use this information, please use the Limit the Use of My Sensitive Personal Information form.  This information will only be retained for as long as needed to fulfill the purposes for which it was collected, as described above. Please note that Lyra does not “sell” or “share” personal information as defined by the CPRA. Outside of the United States, for example in the EU, Switzerland and the UK, you may have the right to request access to, or a copy of, your personal information, including in a portable format; request that we delete your information from our systems; object to or restrict processing of your information; or correct inaccurate or outdated personal information in our systems. These rights may be subject to legal limitations. To exercise your data privacy rights outside of the United States, please contact globaldpo@lyrahealth.com. For more information about how we use and retain your information, please see our Workforce Privacy Notice."
Regulatory Counsel, Content & Frontier AI Regulation
Anthropic

AI Governance

1 day ago

Dublin, IE

Preferred Certifications

About Anthropic

Anthropic’s mission is to create reliable, interpretable, and steerable AI systems. We want AI to be safe and beneficial for our users and for society as a whole. Our team is a quickly growing group of committed researchers, engineers, policy experts, and business leaders working together to build beneficial AI systems.

About the role

Anthropic is seeking a Regulatory Counsel to lead our legal work on online content regulation globally, and to interface with EU regulators on content regulation and AI regulation. Our international footprint covers some material regulatory regimes affecting Anthropic's business, including the EU AI Act, Digital Services Act, the UK Online Safety Act, and the rapidly evolving online-content regimes emerging across APAC and other international markets.

You will provide upfront regulatory-readiness counselling as new laws are developed and implemented, ongoing day-to-day advice once those laws are in force, and lead the non-contentious side of Anthropic's engagement with regulators. You will sit at the intersection of novel legal questions, fast-moving product development, and an unusually engaged regulatory environment, and will work cross-functionally with Legal, Compliance, Safeguards, Security, Product and Operations teams.

Key responsibilities

  • Serve as Anthropic's global in-house regulatory counsel for online content regulation — including the DSA, the UK Online Safety Act, Australia's Online Safety Act, and emerging APAC and other international regimes — covering applicability analysis, readiness, day-to-day advice, and compliance-programme design and maintenance.
  • Support the non-contentious side of Anthropic's regulatory engagement with European regulators on content regulation and AI regulations — including with the European AI Office, the European Commission, national AI competent authorities, Digital Services Coordinators, Ofcom, and their counterparts internationally — including notifications, structured dialogues, RFIs, transparency reporting, and codes-of-practice processes.
  • Provide upfront regulatory-readiness counselling on emerging legislation: track legislative and supervisory developments across international markets, assess applicability and impact on Anthropic's business and products, identify implementation risks, and design compliance approaches well in advance of obligations taking effect
  • Provide ongoing advice once laws are in force: counsel legal, compliance and business teams on day-to-day regulatory questions, translate complex requirements into practical guidance, and help build and maintain scalable compliance programmes
  • Partner with Frontier AI Regulatory Counsel on EU AI Act engagement, translating Anthropic's frontier-AI compliance positions into regulator-facing submissions and bringing regulator expectations back into our substantive work
  • Partner closely with Anthropic's Policy Legal team to support pre-legislative engagement, identify implementation challenges, and translate policy positions into legally-grounded regulatory submissions
  • Work with colleagues across Legal and Compliance to design and operationalise governance, documentation, risk-management and reporting frameworks required by international content laws
  • Coordinate with regional and global counterparts to ensure a consistent global regulatory posture while respecting jurisdiction-specific requirements

Minimum qualifications

  • Qualification to practise law in at least one EU member state or in the UK, with good standing
  • Substantive depth in international content regulation (DSA, UK Online Safety Act, or similar)
  • Hands-on experience advising a technology business (in-house or at a leading law firm) on emerging regulatory regimes, including translating ambiguous or evolving rules into practical, defensible compliance approaches
  • Direct experience engaging with regulators or supervisory bodies in a non-contentious capacity (e.g. the European AI Office, European Commission, national AI competent authorities, Digital Services Coordinators, Ofcom, or equivalent international supervisors)
  • Strong understanding of how EU law-making and supervisory practice actually works, including delegated and implementing acts, guidelines, codes of practice, and the interplay between EU- and member-state-level enforcement
  • Strong cross-functional collaboration skills and the ability to communicate complex legal concepts clearly to technical, policy, product and business audiences
  • Willingness to travel internationally as needed to support regulatory engagement

Preferred qualifications

  • 10–12 years of regulatory legal experience working at a frontier AI company, large online platform, or other high-growth technology business operating under DSA, OSA, EU AI Act or equivalent international regimes
  • Experience contributing to industry codes of practice, regulator-led structured dialogues, or trade association engagement on AI or content regulation
  • Familiarity with adjacent regimes that frequently intersect with content regulation internationally, e.g. privacy, copyright, product safety, and consumer protection
  • A track record of building constructive long-term relationships with regulators
  • Comfort with ambiguity and a track record of developing novel compliance approaches in areas without established precedent
  • A passion for responsible AI development and for getting the balance right between innovation and appropriate safeguards

Role-specific policy: For this role, we expect all staff to be able to work from our Dublin office at least 3 days a week, though we encourage you to apply even if you might need some flexibility for an interim period of time.

The annual compensation range for this role is listed below.

For sales roles, the range provided is the role’s On Target Earnings ("OTE") range, meaning that the range includes both the sales commissions/sales bonuses target and annual base salary for the role.

Annual Salary:
€280.000€350.000 EUR

Logistics

Minimum education: Bachelor’s degree or an equivalent combination of education, training, and/or experience

Required field of study: A field relevant to the role as demonstrated through coursework, training, or professional experience

Minimum years of experience: Years of experience required will correlate with the internal job level requirements for the position

Location-based hybrid policy: Currently, we expect all staff to be in one of our offices at least 25% of the time. However, some roles may require more time in our offices.

Visa sponsorship: We do sponsor visas! However, we aren't able to successfully sponsor visas for every role and every candidate. But if we make you an offer, we will make every reasonable effort to get you a visa, and we retain an immigration lawyer to help with this.

We encourage you to apply even if you do not believe you meet every single qualification. Not all strong candidates will meet every single qualification as listed. Research shows that people who identify as being from underrepresented groups are more prone to experiencing imposter syndrome and doubting the strength of their candidacy, so we urge you not to exclude yourself prematurely and to submit an application if you're interested in this work. We think AI systems like the ones we're building have enormous social and ethical implications. We think this makes representation even more important, and we strive to include a range of diverse perspectives on our team.

Your safety matters to us. To protect yourself from potential scams, remember that Anthropic recruiters only contact you from @anthropic.com email addresses. In some cases, we may partner with vetted recruiting agencies who will identify themselves as working on behalf of Anthropic. Be cautious of emails from other domains. Legitimate Anthropic recruiters will never ask for money, fees, or banking information before your first day. If you're ever unsure about a communication, don't click any links—visit anthropic.com/careers directly for confirmed position openings.

How we're different

We believe that the highest-impact AI research will be big science. At Anthropic we work as a single cohesive team on just a few large-scale research efforts. And we value impact — advancing our long-term goals of steerable, trustworthy AI — rather than work on smaller and more specific puzzles. We view AI research as an empirical science, which has as much in common with physics and biology as with traditional efforts in computer science. We're an extremely collaborative group, and we host frequent research discussions to ensure that we are pursuing the highest-impact work at any given time. As such, we greatly value communication skills.

The easiest way to understand our research directions is to read our recent research. This research continues many of the directions our team worked on prior to Anthropic, including: GPT-3, Circuit-Based Interpretability, Multimodal Neurons, Scaling Laws, AI & Compute, Concrete Problems in AI Safety, and Learning from Human Preferences.

Come work with us!

Anthropic is a public benefit corporation headquartered in San Francisco. We offer competitive compensation and benefits, optional equity donation matching, generous vacation and parental leave, flexible working hours, and a lovely office space in which to collaborate with colleagues. Guidance on Candidates' AI Usage: Learn about our policy for using AI in our application process

AI Advisor
TRU Staffing Partners (Agency)

AI Governance

1 day ago

Anywhere | United States

Preferred Certifications

Our client, a premier global law firm known for its market-leading innovation and high-impact legal work, is seeking an AI Advisor to join its litigation support team. This role sits at the intersection of legal expertise and cutting-edge AI, partnering directly with attorneys to translate complex workflows into scalable, AI-driven solutions while owning end-to-end development from ideation through testing and deployment. The position offers a unique blend of advisory and hands-on building work, collaborating with engineers and leadership to drive responsible AI adoption and deliver enhanced legal services both internally and to clients. Ideal candidates bring experience with legal AI tools like Harvey, Legora or CoCounsel, strong process improvement instincts, and the ability to operate credibly in fast-paced, client-facing environments. Practice Group Engagement
  • Act as a credible, authoritative advisor on AI workflow and integration strategy, guiding attorneys on where and how AI can add value across their practices.
  • Embed within litigation and transactional practice groups to document current-state workflows with sufficient specificity to drive enhanced design translating attorney tasks and needs into scoped requirements and flagging opportunities to leverage existing builds or address known failure points.
  • Support client engagements by partnering with practice teams to deliver AI-assisted legal services directly to clients, maintaining the quality and professional standards expected in client-facing work.
  • Champion responsible AI adoption by ensuring attorneys understand generative AI capabilities, limitations, and firm governance requirements.
  • Coordinate tasks, timelines, and stakeholders for AI workflow development initiatives.
Workflow Development & Testing
  • Own end-to-end AI legal workflow development, decomposing complex legal tasks, designing and testing prompts, aligning outputs to firm standards, and iterating rapidly across platforms.
  • Design and execute testing protocols, including prompt engineering, output benchmarking, and iterative attorney-driven refinement, while maintaining structured decision logs that capture each workflow's task requirements, prompt logic, validation criteria, failure modes, and platform constraints with sufficient specificity to reconstruct workflows on future infrastructure.
  • Partner with engineers as workflows mature, bridging attorney domain knowledge and technical execution while building deeper technical fluency through exposure to pipeline design and failure analysis.
Playbook & Training
  • Contribute to a scalable AI workflow playbook codifying best practices, templates, decision trees, and implementation guides.
  • Provide informed recommendations on AI tools, capabilities, and roadmaps grounded in direct legal practice experience. Proactively share learnings and emerging patterns across the team.
  • Collaborative across training and development teams to design and deliver attorney training programs-including demonstrations, user guides, and feedback mechanisms-for effective AI tool use and workflow adoption.
  • Track and report project status, adoption metrics, and outcomes to Innovation leadership.
  • Stay current on AI developments, regulatory changes, and industry best practices.
What You’ll Bring Required
  • A J.D. from an accredited law school is strongly preferred; however, candidates who do not hold a law degree but possess significant demonstrated experience leading innovation initiatives, driving technology adoption, or overseeing AI implementation at a large law firm or legal technology company will also be given strong consideration.
  • Comfort operating in a billable, client-service environment, with an understanding of the pace, quality expectations, and confidentiality requirements associated with delivering work product directly to clients.
  • Strong aptitude for process improvement and legal technology, including generative AI/large language models with sufficient understanding of where AI succeeds and fails to engage both legal teams and engineers.
  • Direct experience with legal AI platforms (Harvey, Legora, CoCounsel, Lexis+ AI, or comparable), including hands-on building and iterating on prompts and workflows with accountability for output quality.
  • Ability to collaborate with attorneys and leadership at all levels, establishing credibility with senior stakeholders and influencing decisions in fast-moving, ambiguous environments with firsthand understanding of attorney pressures, pace and quality expectations.
  • Strong writing, project management, and organizational skills with sound judgment, able to manage multiple concurrent initiatives, lead and document design calls, translate technical concepts for varied audiences, and independently advance priorities.
  • Collaborative and adaptable team player who tackles challenges with initiative, creativity, and accountability, bringing a client-focused, solutions-oriented mindset.
Preferred
  • J.D. from an accredited law school.
  • Some experience as an attorney at an AMLAW 50 firm or comparable legal environment.
  • Experience training legal teams on new tools, including developing educational materials or governance policies.
  • Knowledge of data security, information governance, and compliance best practices for AI and legal technology.
Expected salary for this role is $153,000 - $220,000, commensurate with experience, training, skills, qualifications, and other market factors. #LI-HYBRID #LI-MF1 Job ID: 7492
Data Scientist (Litigation)
TRU Staffing Partners (Agency)

AI Governance

1 day ago

Anywhere | United States

Preferred Certifications

Our client, an innovative and dynamic global law firm, is seeking a Data Scientist to join its team with a strong litigation support focus, working at the intersection of eDiscovery, advanced analytics, and AI-driven solutions. In this highly hands-on, client-facing role, you’ll partner directly with legal teams to design and deploy custom data workflows, build scalable solutions using Python, SQL, and modern AI/ML tools, and contribute to cutting-edge initiatives like LLM-based extraction, knowledge graphs, and data visualization. With over 50% of time spent embedded on active matters, this is an ideal opportunity for someone with a strong legal or eDiscovery background who wants to expand into broader data science and innovation work while solving complex, high-impact challenges. What You’ll Do If you have spent your career in eDiscovery and litigation support and are ready to apply that foundation, along with a broader technical skill set, to a wider scope of work, this could be the role for you. Impact. Data Scientists sit within a group of discovery, data management, and AI specialists dedicated to designing and executing client-focused workflows on some of the most complex matters in our industry. You will report to the Associate Director of Technical Operations. The role is hands-on and client-facing; more than half of your time will be spent directly embedded in active matters.  Coordination and Execution of In-house Solution Development. You will support the collection of requirements and the design and building of in-house solutions. You will consult with case teams on data strategies and execute rapid solution development including custom scripting, data management, database development, and visualization design. You will complete requests requiring advanced technologies such as document layout analysis, LLM-based information extraction, semantic chunking, and entity recognition, while maintaining comprehensive documentation throughout. Data Project Service Delivery. You will support matter-specific needs as a subject matter resource, analyzing and troubleshooting data processing and analytics issues. You will develop custom eDiscovery workflows and execute data-heavy, data-modeling projects that require creative problem-solving and technical depth. Department Initiatives. You will work closely with other data science teams and Firm leadership to evaluate and test internal solutions and emerging technology. You will serve as a go-to resource for technical knowledge in AI, contributing your expertise to the team’s continuous advancement of its capabilities. What You’ll Bring
  • Some experience in a law firm, legal services, or professional services organization with significant experience working in a team environment.
  • Ability to translate complex concepts into client-friendly language.
  • Highly analytical with strong problem-solving skills and the ability to translate ambiguous problems into structured solutions.
  • Knowledge of statistical analysis and data modeling.
  • Demonstrated hands-on experience with Relativity custom development. Deep knowledge in eDiscovery-focused data processing, structured analytics, and related troubleshooting.
  • Expert-level proficiency in Microsoft Excel, including VBA development, Power Query, complex formula construction, advanced data modeling, and chart design.
  • Experience in creating data visualizations with hands-on proficiency in tools such as Plotly, Tableau, and Microsoft Power BI.
  • Strong Python skills for data analysis, statistical modeling, and AI/ML prototyping (e.g., pandas, PyTorch, TensorFlow); advanced SQL proficiency; experience building data pipelines.
  • Proficiency in front-end web technologies including JavaScript, HTML, and CSS, with the ability to develop interactive web-based tools and dashboards.
  • Hands-on experience with AI platforms and tools (e.g., OpenAI, Microsoft Azure OpenAI, Hugging Face, LangFlow, LangChain), including practical implementation of RAG pipelines, vector databases, and knowledge graph construction.
  • General knowledge of social network analysis, natural language processing, classification algorithms, and image processing.
  • Familiarity with git, svn, JIRA, or other version control technologies.
  • Familiarity with hardware platforms (e.g., CPUs, GPUs, FPGAs).
  • Bachelor’s degree.
  • Familiarity with leading legal technology platforms is preferred (docketing systems, document management systems, case management systems, eDiscovery, data collection and web capture solutions).
  • Experience evaluating LLM output quality through benchmarking, precision, recall, and extraction accuracy assessment is preferred.
Expected salary for this role is $133,000 - $191,000, commensurate with experience, training, skills, qualifications, and other market factors. #LI-HYBRID #LI-BJ1 Job ID: 7494
Privacy Compliance Manager
FanDuel

Privacy

2 days ago

New York City

Preferred Certifications

CIPP/US

CIPP/E

CIPM

CIPT

This job is CIPP/US preferred.
Want to improve your chance of landing this job?

Learn More

THE POSITION
Our roster has an opening with your name on it

FanDuel Group is looking to add a Privacy Manager to support and enhance our global privacy program. This role will be responsible for maintaining and maturing FanDuel’s privacy compliance framework, ensuring adherence to evolving legal, regulatory, and internal requirements across multiple jurisdictions.

The Privacy Manager will report into the Corporate Compliance Senior Manager within FanDuel Group’s Legal and Compliance function. This role will drive execution of key privacy initiatives, including Privacy Impact Assessments, privacy rights request, third-party risk management, and own relationships with privacy management platforms. The position will partner closely with Legal, Technology, Procurement,

Flutter Group and other business stakeholders to embed privacy-by-design across new and existing products.

The ideal candidate for this role brings strong experience in privacy program development, operational execution, and stakeholder management. Success in this role requires excellent analytical, communication, and problem-solving skills, along with a high level of attention to detail, ownership, and the ability to thrive in a fast-paced, highly regulated environment.

In addition to the specific responsibilities outlined above, employees may be required to perform other such duties as assigned by the Company. This ensures operational flexibility and allows the Company to meet evolving business needs.

THE GAME PLAN
Everyone on our team has a part to play

This position will work cross-functionally with Legal, Compliance, Technology, Product, and business teams to strengthen and scale FanDuel’s privacy program. This role requires someone who is committed to fostering a culture of privacy and responsible data use. This role will execute on the following:

Privacy Program & Governance:

  • Maintain and enhance the privacy compliance framework, including policies, procedures, and taxonomy to align with regulatory and internal requirements.
  • Coordinate activities across the three lines of defense, including internal audit, compliance testing, external reviews, and preparation of privacy reporting.
  • Own and mature Privacy Impact Assessment (PIA) processes, including deeper integration with business change management protocols.
  • Develop and manage reporting for privacy KRIs, control metrics, and risk and compliance dashboards.
  • Oversee and optimize FanDuel’s privacy management platform, including data discovery, classification, third-party inventories, and automation of privacy rights requests.
  • Establish and maintain a structured privacy horizon-scanning process to track regulatory developments and emerging risks.
  • Develop and deliver privacy training and awareness initiatives across the organization.

Privacy Operations:

  • Conduct and oversee PIAs for new products and initiatives, providing risk-based recommendations and mitigation strategies.
  • Manage and enhance end-to-end processes for privacy rights requests (e.g., access and erasure), ensuring compliance with statutory requirements and quality standards.
  • Advise on privacy due diligence for third-party vendors, including review of vendor RFP responses and vendor risk assessments.
  • Serve as a subject matter expert and escalation point for complex privacy matters.

Stakeholder Management & Leadership:

  • Build and maintain strong cross-functional relationships and collaborate with stakeholders at all levels of the organization.
  • Advise on key organizational efforts such as cookie consent management, data retention strategies, and new product launches across the US and Canada.
  • Partner with global colleagues to support standards development, knowledge sharing, and consistent privacy practices.
  • Own the reporting obligations required by Canadian government bodies in the development of regulated new product initiatives.
  • Work closely with the Privacy Legal team on cross-functional initiatives.
  • Provide leadership and mentorship to junior privacy team members, supporting their development and growth.
  • Identify opportunities for process improvement, automation, and operational efficiency across privacy workflows.

THE STATS
What we're looking for in our next teammate

  • 4–6 years of privacy compliance or data protection experience in a regulated industry (e.g., gaming, financial services, healthcare, or technology)
  • Demonstrated experience managing privacy frameworks, PIAs, and privacy rights requests across multiple regulatory regimes (e.g., US, Canada, UK GDPR)
  • Experience leading and mentoring team members
  • Strong ability to interpret and apply privacy laws, regulations, and policies
  • Excellent written and verbal communication skills, with the ability to translate complex privacy concepts for diverse audiences
  • Strong attention to detail and analytical skills in assessing data processing activities and risks
  • Ability to manage multiple priorities and adapt in a fast-changing regulatory environment
  • Proven ability to collaborate effectively across cross-functional teams and influence stakeholders
  • Strong problem-solving skills with the ability to independently drive initiatives and deliver practical solutions
  • Experience with privacy management tools and platforms, including DSAR and assessment workflows
  • Basic understanding of IT, data management and information security principles
  • Proficiency in Excel required
  • Relevant certifications such as CIPP/US, CIPP/E, CIPM, or CIPT preferred
  • A self-starter with strong ownership and follow-through
  • Ability to thrive in a fast-paced, high-growth environment
  • A collaborative team player with a desire to contribute to and grow within FanDuel Group

ABOUT FANDUEL

FanDuel Group is the premier mobile gaming company in the United States and Canada. FanDuel Group consists of a portfolio of leading brands across mobile wagering including: America’s #1 Sportsbook, FanDuel Sportsbook; its leading iGaming platform, FanDuel Casino; the industry’s unquestioned leader in horse racing and advance-deposit wagering, FanDuel Racing; and its daily fantasy sports product.

In addition, FanDuel Group operates FanDuel TV, its broadly distributed linear cable television network and FanDuel TV+, its leading direct-to-consumer OTT platform. FanDuel Group has a presence across all 50 states, Canada, and Puerto Rico.

The company is based in New York with US offices in Los Angeles, Atlanta, and Jersey City, as well as global offices in Canada and Scotland. The company’s affiliates have offices worldwide, including in Ireland, Portugal, Romania, and Australia.

FanDuel Group is a subsidiary of Flutter Entertainment, the world's largest sports betting and gaming operator with a portfolio of globally recognized brands and traded on the New York Stock Exchange (NYSE: FLUT).

PLAYER BENEFITS
We treat our team right

We offer amazing benefits above and beyond the basics. We have an array of health plans to choose from (some as low as $0 per paycheck) that include programs for fertility and family planning, mental health support, and fitness benefits. We offer generous paid time off (PTO & sick leave), annual bonus and long-term incentive opportunities (based on performance), 401k with up to a 5% match, commuter benefits, pet insurance, and more - check out all our benefits here: FanDuel Total Rewards. *Benefits differ across location, role, and level.

FanDuel is an equal opportunities employer and we believe, as one of our principles states, “We are One Team!”. As such, we are committed to equal employment opportunity regardless of race, color, ethnicity, ancestry, religion, creed, sex, national origin, sexual orientation, age, citizenship status, marital status, disability, gender identity, gender expression, veteran status, or any other characteristic protected by state, local or federal law. We believe FanDuel is strongest and best able to compete if all employees feel valued, respected, and included.

FanDuel is committed to providing reasonable accommodations for qualified individuals with disabilities. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please email Benefits@fanduel.com.

The applicable salary range for this position is $94,000 - $118,000 USD, which is dependent on a variety of factors including relevant experience, location, business needs and market demand. This role may offer the following benefits: medical, vision, and dental insurance; life insurance; disability insurance; a 401(k) matching program; among other employee benefits. This role may also be eligible for short-term or long-term incentive compensation, including, but not limited to, cash bonuses and stock program participation. This role includes paid personal time off and 14 paid company holidays. FanDuel offers paid sick time in accordance with all applicable state and federal laws.

It is unlawful in Massachusetts to require or administer a lie detector test as a condition of employment or continued employment. An employer who violates this law shall be subject to criminal penalties and civil liability.

#LI-Hybrid

Free Study Planner

The Privacy Prep Blueprint gives you the structure and study rhythm to make steady progress — without burnout or guesswork. The ultimate IAPP Study Guide.

Courses

CIPP/US

CIPM

CIPP/E

CIPT

CIPP/C

AIGP

Study Planner

Practice Questions

Are you ready for your exam? Test yourself with 10 free practice questions at the links below.

CIPP/US Practice Exam

CIPP/US Pracitce Exam

Get a free 10-question CIPP/US practice exam, with instant results.

CIPP/E Practice Exam

CIPP/E Pracitce Exam

Get a free 10-question CIPP/E practice exam, with instant results.

CIPP/C Practice Exam

CIPP/C Pracitce Exam

Get a free 10-question CIPP/C practice exam, with instant results.

CIPM Practice Exam

CIPM Pracitce Exam

Get a free 10-question CIPM practice exam, with instant results.

CIPT Practice Exam

CIPT Pracitce Exam

Get a free 10-question CIPT practice exam, with instant results.

AIGP Practice Exam

AIGP Pracitce Exam

Get a free 10-question AIGP practice exam, with instant results.

Privacy Bootcamp Reviews

Study the Smart Way With Privacy Bootcamp

CIPP/US | CIPP/E | CIPP/C | CIPM | CIPT | AIGP
Privacy Bootcamp Student
  • Comprehensive, all-in-one training source
  • Pass on your first attempt — or your money back*
  • Gain real exam experience with a live testing environment