CrawlJobs Logo

Senior Counsel, Privacy, AI & Data Responsibility

mastercard.com Logo

Mastercard

Location Icon

Location:
United Kingdom , Peterborough

Category Icon
Category:

Job Type Icon

Contract Type:
Not provided

Salary Icon

Salary:

Not provided

Job Description:

Mastercard is committed to balancing innovation while protecting individual privacy and has embraced privacy and data protection as core to the successful execution of its business strategy. As part of that commitment, Mastercard has established a world-class privacy program and is currently adding talent to its global team. The Senior Counsel, Privacy, AI & Data Responsibility will support the team’s engagement with Mastercard’s Human Resources function and other related functions which handle employee data, such as corporate security, and related divisions, in compliance with global privacy and data-related laws. Serve as a strategic advisor to business leaders, driving the integration of Privacy by Design principles into all employee-related initiatives and enabling responsible innovation across Mastercard’s global operation. The position will report to the Senior Managing Counsel, Privacy, AI & Data Responsibility and will be a member of both the Global Privacy, AI & Data Responsibility team and the Law Department. Demonstrate executive presence and influence, partnering with senior stakeholders to shape Mastercard’s privacy strategy, ensure compliance, and champion industry-leading practices in data responsibility. The Senior Counsel should be abreast of innovative technologies related to the workplace, including data security, threat detection, and employee monitoring.

Job Responsibility:

  • Ensure alignment and compliance with Mastercard’s policies, procedures, and processes and with global privacy and data-related laws, including those related to the protection of employee personal information and the security of Mastercard’s network
  • Triage information incidents relating to employee data, analyzing facts in light of applicable privacy and data protection laws, regulations and standards, and making recommendations to drive incidents through to resolution
  • Ensure appropriate documentation is in place in accordance with privacy accountability requirements, including those present in the GDPR, CCPA, AI laws that impact that workplace (such as the EU AI Act), and similar laws
  • conduct Data Protection Impact Assessments and AI Assessments as needed
  • Support Mastercard’s processes for handling privacy rights requests from candidates and employees, including access and other rights under applicable laws
  • Draft appropriate privacy terms in accordance with Mastercard’s standards, review contracts and manage complex negotiations with partners and vendors
  • Anticipate and interpret emerging privacy and AI regulations, providing expert guidance to executive leadership and ensuring Mastercard remains at the forefront of regulatory compliance in the EU, UK, and globally
  • Engage with the organization on privacy and data-related matters, e.g., through employee training and raising employee awareness about relevant regulatory requirements and Mastercard procedures
  • Spearhead and implement initiatives related to efficiency and use of AI innovation in managing increasing risk in human resources privacy compliance

Requirements:

  • Law degree required
  • Membership to a Bar (if permitted by law)
  • EU Privacy experience, ideally supporting or advising internal corporate team on matters relating to recruitment and employment
  • Solid knowledge of global privacy laws, frameworks, and standards, including GDPR and CCPA
  • Demonstrated experience advising companies on privacy compliance and data-related issues
  • Superior time management, planning, and organizational skills
  • Strong analytic capabilities and written and oral communication skills
  • Attention to detail is a must
  • Exceptional interpersonal skills with proven experience in relationship building and partnering
  • Must work well in both team and individual settings, including across global jurisdictions

Nice to have:

Any additional qualifications (e.g., Master of Laws degree, CIPP/E) is considered an asset

Additional Information:

Job Posted:
February 08, 2026

Employment Type:
Fulltime
Job Link Share:

Looking for more opportunities? Search for other job offers that match your skills and interests.

Briefcase Icon

Similar Jobs for Senior Counsel, Privacy, AI & Data Responsibility

Global Data Privacy Counsel

We are looking for a senior attorney with extensive experience in global data pr...
Location
Location
United States , Atlanta
Salary
Salary:
Not provided
arrive.com Logo
Arrive
Expiration Date
Until further notice
Flip Icon
Requirements
Requirements
  • Juris Doctor degree from a reputable, accredited U.S. law school
  • Active license in good standing with one or more U.S. state bars (Georgia preferred)
  • 10+ years of progressive experience in data privacy and cybersecurity legal matters, with significant in-house experience at a high-growth, technology-driven company
  • Deep expertise and knowledge of and hands-on experience with U.S. and international data privacy, cybersecurity, and compliance laws and frameworks (including GDPR, CCPA/CPRA, PCI-DSS, ISO certifications, and other relevant global standards) and leading-edge AI regulations and frameworks
  • Demonstrated success in providing strategic legal counsel that balances risk management with enabling innovation and business growth, particularly in payments and data-driven initiatives
  • Proven experience leading global privacy and data protection programs, including managing privacy and data protection risk frameworks and governance
  • Experience managing external counsel, auditors, and regulators
  • Proven ability to lead, develop, and inspire diverse, global teams, including direct leadership experience with Data Protection Officers and other privacy professionals
  • Strong business acumen with the ability to translate complex legal concepts into clear, actionable advice that aligns with business objectives and supports deal-making and sales acceleration
  • Excellent communication and interpersonal skills, with the ability to influence stakeholders at all levels, including senior executives and cross-functional teams globally
Job Responsibility
Job Responsibility
  • Serve as a trusted strategic legal advisor to executive leadership, business unit and function heads, and the governance committees on global privacy, data protection, and cybersecurity risks, as well as opportunities aligned with rapid business growth and innovation
  • Design, lead, and continuously evolve the global privacy and data protection program, ensuring it not only meets regulatory requirements but also supports scalable growth and competitive advantage in a fast-paced, high-growth environment
  • Partner closely with product, technology, payments, data, software and hardware sales, marketing, and strategy teams to embed privacy-by-design and data governance principles into all data-driven and payment-related initiatives
  • Advise on privacy, data protection, cross-border data processing, and emerging technologies (AI and machine learning), in connection with parking, public transport and other urban mobility technologies and data services (B2B, B2C), to help the company navigate these complex regulatory environments while accelerating innovation
  • Balance risk management with enabling agility—help business units achieve their ambitious growth objectives without compromising compliance or customer trust
  • Lead and manage a global, unified privacy and data protection team, including the EU Data Protection Officer and EU Privacy Program Manager, and serve as the global privacy and data protection leader responsible for harmonizing privacy and data protection practices across all regions
  • Act as the company’s U.S. and Canada Privacy Officer, overseeing all U.S.-specific and Canada-specific aspects of the global privacy and data protection program
  • Own enterprise-wide development, implementation, and continuous improvement of privacy and data protection policies, standards, and frameworks aligned with relevant global privacy and data protection-related regulations
  • Develop and maintain a privacy and data protection risk management framework and a dashboard of key privacy metrics to inform leadership decision making and monitor program effectiveness in a high-growth environment
  • Lead privacy and data protection audits and program assessments to ensure compliance and identify areas for improvement aligned with rapid company growth
Read More
Arrow Right

Senior Corporate Counsel, Product and Privacy

We are looking for a sharp and strategic attorney to join our Legal, Privacy and...
Location
Location
United States
Salary
Salary:
200000.00 - 230000.00 USD / Year
pomelocare.com Logo
Pomelo Care
Expiration Date
Until further notice
Flip Icon
Requirements
Requirements
  • JD from an accredited law school with active U.S. bar membership
  • 7+ years of legal experience – a blend of law firm and in-house roles in health tech or digital health
  • Direct, hands-on experience advising on product development and comfortable with rapid iteration
  • Demonstrated experience counseling on AI/ML products and services, with a strong understanding of the associated legal and ethical implications of AI in healthcare
  • Strong familiarity with U.S. privacy laws, e.g., HIPAA and state consumer privacy laws and regulations, and the laws and regulations that impact a health care business, e.g., TCPA, CAN-SPAM, telehealth and D2C is a major plus
  • Excellent communication, analytical and problem-solving skills with the ability to translate complex legal concepts into actionable business guidance
  • Collaborative team player who builds strong relationships across departments
Job Responsibility
Job Responsibility
  • Partner with cross-functional teams to provide practical legal guidance to product, engineering, clinical and operations teams on healthcare and regulatory considerations across the product lifecycle, including product development, our user interface and experience, feature releases and AI-powered initiatives and decision support
  • Partner with the General Counsel and other leaders to continue maturing our responsible AI governance program, ensuring that our AI innovations balance strategic business goals with regulatory compliance and ethical considerations
  • Actively monitor and analyze new and evolving AI regulations, providing timely updates and actionable insights to leadership to ensure our initiatives remain compliant
  • Review and advise on consumer-facing marketing materials and campaigns to ensure compliance with applicable advertising and consumer protection laws
  • Serve as a key legal resource and partner on privacy and data security matters
  • Partner closely with our compliance team to build and mature our privacy program, advising on legal considerations related to data flows, risk assessments, and the development of new policies and procedures
  • Provide guidance on the development of new product and service lines, ensuring they align with HIPAA and evolving state consumer privacy laws
What we offer
What we offer
  • Competitive healthcare benefits
  • Generous equity compensation
  • Unlimited vacation
  • Fulltime
Read More
Arrow Right

Senior Counsel, Privacy, AI & Data Responsibility

Mastercard is committed to balancing innovation with legal compliance and has em...
Location
Location
United States of America , Purchase; Arlington
Salary
Salary:
204000.00 - 325000.00 USD / Year
mastercard.com Logo
Mastercard
Expiration Date
Until further notice
Flip Icon
Requirements
Requirements
  • Law degree required
  • Membership to a Bar (if permitted by law)
  • Solid expertise in AI legal frameworks
  • Strong understanding of global data protection laws (e.g., GDPR, CCPA)
  • Track record dealing with Artificial Intelligence projects, products or solutions
  • Good understanding of AI technologies, incl. Generative and Agentic AI
  • Ability to translate complex technical concepts into practical legal solutions
  • Ability to collaborate across functions and influence stakeholders
  • Exceptional interpersonal skills with proven experience in relationship building and partnering
  • Superior time management, planning, and organizational skills
Job Responsibility
Job Responsibility
  • Partner with the AI and Data Office to enable AI efforts, including big bets from a privacy and AI legal perspective
  • Work with business stakeholders to implement legal, technical, operational and administrative requirements for Mastercard's AI solutions and uses stemming from evolving AI regulations globally
  • Provide AI legal and privacy expertise to key initiatives furthering Mastercard AI Governance
  • Develop and review documentation on Mastercard's Responsible AI
  • Monitor regulatory guidance and enforcement on AI laws to assess evolving impact on Mastercard’s AI Compliance Program
  • Collaborate with Public Policy and Government Affairs on engagement efforts on evolving AI regulatory and policy initiatives
What we offer
What we offer
  • Insurance (including medical, prescription drug, dental, vision, disability, life insurance)
  • Flexible spending account and health savings account
  • Paid leaves (including 16 weeks of new parent leave and up to 20 days of bereavement leave)
  • 80 hours of Paid Sick and Safe Time
  • 25 days of vacation time and 5 personal days, pro-rated based on date of hire
  • 10 annual paid U.S. observed holidays
  • 401k with a best-in-class company match
  • Deferred compensation for eligible roles
  • Fitness reimbursement or on-site fitness facilities
  • Eligibility for tuition reimbursement
  • Fulltime
Read More
Arrow Right

Compliance Analyst

insightsoftware is seeking a detail-oriented and proactive Compliance Analyst to...
Location
Location
United States , Remote
Salary
Salary:
Not provided
insightsoftware.com Logo
insightsoftware
Expiration Date
Until further notice
Flip Icon
Requirements
Requirements
  • Bachelor's degree in information security, Cybersecurity, Computer Science, Risk Management, Legal Studies, Business Administration, or related field
  • Minimum 3+ years of experience in compliance program management, risk management, or information security roles, preferably in regulated industries or technology companies
  • Demonstrated experience responding to third-party risk assessments, security audits, customer security questionnaires, RFPs, and compliance due diligence requests
  • Working knowledge of regulatory frameworks and standards (e.g., ISO 27001, SOC 2 (Type II), NIST, FedRAMP, CMMC, PCI DSS, GDPR, CCPA), trade control regulations (EAR, ITAR), anti-bribery/corruption laws (FCPA, UK Bribery Act), and data privacy principles
  • A strong knowledge of at least one regulatory framework governing matters pertaining to data privacy, cybersecurity, trade compliance, or third-party risk management
  • Experience with third-party screening tools and vendor risk management platforms
  • Familiarity with GRC or data protection management platforms (e.g., OneTrust, ServiceNowMetricStream)
Job Responsibility
Job Responsibility
  • Support the development, implementation, and maintenance of a global compliance program, including trade compliance, anti-bribery/corruption, anti-trust, and business ethics
  • Conduct secondary screening of third parties (vendors, partners, customers) , and assess potential matches against government watchlists of denied, debarred, sanctioned, or restricted parties to ensure compliance with applicable trade compliance, export control and sanctions regulations (e.g., U.S. Department of the Treasury Office of Foreign Assets Control ("OFAC"), U.S. Department of Commerce Bureau of Industry and Security ("BIS"), U.K. Office of Financial Sanctions Implementation ("OFSI"), European Union, and United Nations)
  • Assist with export classification determinations and licensing requirements for software products and services, including evaluation of Export Control Classification Numbers ("ECCNs")
  • Support the company's compliance with applicable data protection regulatory frameworks (e.g., GDPR, CCPA)
  • Support the Corporate Counsel, Data Privacy, AI, Cybersecurity with data protection initiatives and obligations including data mapping exercises, processing activity records, and privacy impact assessments, and coordinate responses to data subject access requests ("DSARs") and privacy-related inquiries
  • Support privacy management tools and platforms for consent management and privacy workflow automation
  • Partner with company counsel, InfoSec, and other stakeholders with compliance audits, data privacy questionnaires, and third-party risk assessment processes including vendor due diligence and ongoing monitoring
  • Support risk and control self-assessments ("RCSA"), audit management, and remediation tracking
  • Collaborate with stakeholders including the Chief Information Security Officer ("CISO") and the team to quantify, monitor, and report on security and compliance performance
  • Maintain GRC platforms (e.g., ServiceNow, Archer, MetricStream) to track compliance activities, risks, and controls
Read More
Arrow Right

Senior Director Privacy Counsel

Bumble’s mission is to foster healthy and equitable relationships across the glo...
Location
Location
United States , Austin; New York
Salary
Salary:
205000.00 - 275000.00 USD / Year
bumble.com Logo
Bumble Inc.
Expiration Date
Until further notice
Flip Icon
Requirements
Requirements
  • J.D. degree and active bar membership in good standing
  • 12+ years of relevant privacy and data protection experience, including in-house counsel roles with U.S.-based global companies
  • Deep understanding of global privacy regulations, including GDPR, UK GDPR, CCPA/CPRA, biometric specific laws and other U.S. privacy and data security frameworks
  • Demonstrated experience leading complex data breach and incident response programs, including coordination with InfoSec, legal assessments, and notification requirements
  • Hands-on experience owning and managing ROPA, DPIAs, and other GDPR compliance artifacts
  • Practical, risk-based mindset and strong organizational skills—comfortable building scalable systems that reduce redundancy and ensure compliance
  • Ability to distill complex regulatory requirements into clear, actionable advice tailored for business partners
  • Experience building teams and/or leading through senior cross-functional partners — setting standards, coaching, and creating clarity across ambiguous, high-impact work
  • Strong interpersonal and communication skills with a proven track record of influencing and collaborating across diverse global teams, including the ability to present to and advise senior leaders across the organization and the members of the Audit Committee
  • Deep alignment with Bumble’s mission, values, and global focus
Job Responsibility
Job Responsibility
  • Define Bumble’s global privacy strategy, operating model, and multi-year roadmap, navigating new uses of member data in AI models as well as the emerging regulatory schemes that will govern this work
  • Provide critical strategic legal guidance regarding privacy usage that drives both innovation and the Company’s commitment to privacy while building an efficient & scalable privacy compliance function - and partnering hands-on with leaders across the organisation
  • Drive scalable, cross-functional privacy compliance programs aligned with global frameworks including GDPR, UK DPA, CCPA/CPRA, and other U.S. state-level privacy laws, creating a data governance framework and implementing a data governance structure
  • Provide regular privacy reporting and presentations to the Audit Committee and senior leadership, clearly communicating risk, readiness, trends, and decisions in a way that supports strong governance
  • Partner closely with an external Data Protection Officer (DPO) and internal senior leaders to navigate EU and UK obligations, US privacy frameworks, and evolving regulatory expectations, negotiating solutions that preserve relationships and outcomes
  • Lead Bumble’s privacy-related cyber incident and data breach response program end-to-end in close partnership with Information Security—owning readiness and investigation/triage protocols related to privacy, making notification and regulatory reporting decisions across jurisdictions, coordinating regulator engagement, and driving post-incident remediation and lessons learned—serving as the senior escalation point for high-severity matters
  • Own and maintain core GDPR compliance documentation, including Records of Processing Activities (ROPA), Data Protection Impact Assessments (DPIAs), and Lawful Basis assessments and draft and negotiate Data Processing Agreements
  • Partner closely with InfoSec, Product, and Engineering teams to ensure security safeguards, privacy-by-design, and clear roles and responsibilities in incident preparedness
  • Partner closely with the member support function to respond to requests from members for access to or deletion of their data, and assist on (i) regulatory investigations from regulators in the US, UK and EU
  • and (ii) member claims in civil courts, in relation to Bumble’s response to members’ requests
  • Fulltime
Read More
Arrow Right

Senior Privacy Counsel & Data Protection Officer

Make online trading safer and privacy-first. As Senior Privacy Counsel & Data Pr...
Location
Location
Germany , Berlin
Salary
Salary:
Not provided
adevinta.com Logo
Adevinta
Expiration Date
Until further notice
Flip Icon
Requirements
Requirements
  • Relevant experience both in a law firm and in-house, preferably with online platforms and/or ad tech
  • German law degree (2. Staatsexamen or equivalent)
  • Multi-year experience in the data protection field
  • Experience working as a DPO
  • Experience successfully engaging with data protection regulators
  • Proactive and a creative problem solver
  • High interest in networking and building social connections
  • Excellent collaborator with solid diplomacy, stakeholder management and strong presentation skills
  • Strong understanding of AI and data-driven technologies and their privacy implications
  • Know how to assess and mitigate privacy risks of AI systems
Job Responsibility
Job Responsibility
  • Act as a key contact for local regulators and officials in incidents, investigations or policy consultations
  • Monitor and interpret changes in legislation, industry standards and regulatory positions on privacy and data use
  • Develop and maintain a strong network with external privacy experts
  • Manage, monitor and report on privacy compliance topics, including records of processing activities, impact assessments and data retention
  • Identify data protection issues proactively and recommend pragmatic remedies
  • Co-shape and iterate the local privacy strategy and roadmap
  • Fulfill all DPO-related tasks under GDPR and local law, including reporting and governance structures
  • Run regular internal privacy compliance audits
  • Design and deliver training for business stakeholders
What we offer
What we offer
  • An attractive Base Salary
  • Participation in our Short Term Incentive plan (annual bonus)
  • Work From Anywhere: Enjoy up to 20 days a year of working from anywhere
  • A 24/7 Employee Assistance Program for you and your family
  • A collaborative environment with an opportunity to explore your potential and grow
  • A range of locally relevant benefits
  • Fulltime
Read More
Arrow Right

Director, Legal Product & Privacy

Reporting into the Chief Legal Officer, the Director of Legal Product & Privacy ...
Location
Location
United States , San Francisco
Salary
Salary:
298000.00 - 351000.00 USD / Year
https://checkr.com Logo
Checkr
Expiration Date
Until further notice
Flip Icon
Requirements
Requirements
  • J.D. from an accredited law school and admission to at least one U.S. bar
  • 10+ years of experience practicing law, including 3-5 years of management experience, with a focus on technology, privacy, data protection, and product counselling
  • Proven ability to provide strategic, sales-facing legal guidance to high-growth tech companies
  • Experience learning and understanding the complexities of highly regulated products
  • Ability to calibrate risk based on business objectives and stage of product, approaching legal counseling with a solutions-based response
  • Deep knowledge of consumer protection laws and global privacy frameworks, AI legal implications, and product risk management
  • Experience leading and scaling legal teams, with strong mentorship and organizational skills
Job Responsibility
Job Responsibility
  • Define and execute the vision for the Product & Privacy legal function, ensuring we are a strategic business driver and not a blocker
  • Provide senior, high-impact legal counsel on Checkr’s products, including Checkr Workforce (hiring), Checkr Trust (risk intelligence), Checkr Personal (consumer profiles) and Truework (lending), as well as our cutting edge People Data Graph
  • Serve as primary legal advisor for consumer protection laws encompassing consumer reporting, privacy, data protection, and AI, including FCRA, CCPA, GDPR, FADP, HIPAA, PIPEDA, BIPA, and GLBA
  • Develop and deliver forward-looking thought leadership on legal, regulatory, and industry trends, for our customers, prospects and internal teams through written content, presentations and other customer-facing materials
  • Partner with Sales and Customer Success teams to counsel on strategic customer engagements to highlight product compliance, provide thought leadership, and navigate complex product-related inquiries
  • Oversee legal support for high-value enterprise accounts, critical incident responses, and policy-driven initiatives to mitigate regulatory and reputational risks
  • Manage and mentor the Product & Privacy legal team, ensuring coverage across key products, reducing single-threaded dependencies, and scaling the function with the business
What we offer
What we offer
  • A fast-paced and collaborative environment
  • Learning and development allowance
  • Competitive cash and equity compensation, and opportunity for advancement
  • 100% medical, dental, and vision coverage
  • Up to $25K reimbursement for fertility, adoption, and parental planning services
  • Flexible PTO policy
  • Monthly wellness stipend
  • In-office perks such as lunch four times a week, a commuter stipend, and an abundance of snacks and beverages
  • A relocation stipend may be available
  • Fulltime
Read More
Arrow Right

Director of Compliance

Norm Ai is seeking a highly experienced Director of Compliance to design, build,...
Location
Location
United States , New York City
Salary
Salary:
270000.00 - 310000.00 USD / Year
norm.ai Logo
Norm AI
Expiration Date
Until further notice
Flip Icon
Requirements
Requirements
  • J.D. from recognized law school
  • 8+ years of experience in regulatory, legal, or compliance leadership roles within financial services, insurance, legal services, or a similarly regulated industry
  • Deep experience in professional responsibility, ethical compliance, insider trading/MNPI governance, privacy law, and data governance
  • Experience defining and governing data classification and handling requirements from a policy and legal perspective
  • Demonstrated ability to operationalize compliance requirements into policies, governance frameworks, and organizational processes
  • Proven experience conducting compliance investigations and remediation efforts
  • Excellent communication skills, including advising senior leadership and working cross-functionally with both technical and non-technical teams
  • AI Fluency: actively use AI in day-to-day work to support thinking, creation, and problem-solving
Job Responsibility
Job Responsibility
  • Uphold and operationalize legal and ethical obligations
  • Own the company-wide ethical compliance program, including codes of conduct, conflicts of interest, attestations, restricted lists, investigations, and disciplinary processes
  • Advise leadership on legal and regulatory risk related to business practices, product design, and internal operations
  • Own the data governance and classification policy
  • Ensure compliance with privacy and data protection laws (GDPR, CCPA/CPRA, emerging U.S. state laws, and international regimes as applicable)
  • Establish governance over data use, access, retention, deletion, and permissible purposes
  • Review and approve workflows, tools, and processes involving sensitive, regulated, or client data
  • Build and sustain a culture of compliance, accountability, and ethical decision-making across the organization
  • Develop and deliver training, communications, and guidance
  • Lead or oversee investigations into compliance violations and manage remediation and corrective action plans
What we offer
What we offer
  • Equity compensation
  • 401(k) plan with an employer match
  • Top-tier insurance coverage, encompassing health, dental, hospital, accident, and vision plans
  • Relocation reimbursement for candidates needing to relocate to NYC
  • Fast-paced learning environment where professional growth is constant
  • Fulltime
Read More
Arrow Right