Technology, AI, Privacy & Compliance Counsel (Remote)

At Allstate, great things happen when our people work together to protect families and their belongings from life’s uncertainties. And for more than 90 years, our innovative drive has kept us a step ahead of our customers’ evolving needs. From advocating for seat belts, air bags and graduated driving laws, to being an industry leader in pricing sophistication, telematics, and, more recently, device and identity protection.

We are seeking a creative, high‑energy attorney passionate about the intersection of law, business, technology, and data. In this role, you will join the Business Law division of Allstate’s Law and Regulation department, providing strategic and practical legal counsel to Allstate’s risk, technology and compliance organizations, supporting enterprise‑wide AI and technology initiatives.

This attorney will provide business‑focused, strategic legal guidance on AI governance, technology, risk, compliance and privacy for a range of business initiatives involving emerging technologies as well as complex compliance matters. As a subject matter expert and key business partner, you will bring strong business acumen and hands‑on experience with AI governance, data governance, privacy and compliance obligations within a heavily regulated industry.

The role involves a collaborative approach to achieve business objectives, with broad responsibilities including counseling on commercial transactions, technology product development, data management, and related risk areas such as cybersecurity.

Key Responsibilities:

• Deep understanding of GLBA, FCRA, CCPA, GDPR and the EU AI Act and similar laws, with capability to conduct complex research and determine applicable and pertinent laws, statutes, regulations, rules, and other legal authorities.
• Proactively conduct complex research on emerging legal issues to provide legal support to business, technology and compliance teams.
• Provide legal counsel to AI governance, data governance and privacy programs on emerging laws and regulations, regulatory guidelines and future trends.
• Conduct risk‑return analyses on key issues in partnership with key risk organizations, looking at issues from a holistic perspective based on overall impact to the enterprise; make strategic and legal recommendations based on risk analyses.
• Play a key role on complex projects, collaborating with other legal teams, as well as risk and compliance, technology and business teams.
• Understand the dynamics of working within a highly regulated environment including the interactions between business partners, technology, compliance, risk, government relations and other legal teams, as well as the interactions between laws of different jurisdictions.
• Assist in building a culture of constructive debate and conversations with a virtual team across multiple locations.

Education & Experience:

• J.D. is required and active bar membership in good standing.
• 7+ years legal experience in a law firm or an in‑house legal department for a mid‑ to large‑sized company focusing on emerging technologies.
• Strong experience in the following areas: AI and data governance; technology product counseling; privacy; developing and implementing compliance strategies; and advising on commercial operations.
• Experience in commercial transactions, insurance regulation or other highly regulated industries a plus.

Key Competencies & Functional Skills:

• Strong focus on collaboration and building strong business relationships.
• Excellent verbal and written communication skills.
• Proficient in Microsoft Office and other relevant legal or business technology tools.
• Strong analytical and critical thinking abilities.
• Demonstrated discretion and professionalism in handling sensitive and confidential information.
• High business acumen, including the ability to assess and communicate legal risk in a commercial context and contribute to the development of business cases and return‑on‑investment evaluations.

Remote Work & Travel Expectations:

• This is a remote role with travel expectations. While candidates may be located anywhere in the U.S., travel will primarily be to Chicago/Northbrook, IL, with occasional travel to Dallas, TX; Charlotte, NC; Scottsdale, AZ; or other sites as needed due to team collaboration and business travel considerations.

Supervisory Responsibilities:

• This role does not have supervisory responsibilities.

Key Skills:

AI Systems; Artificial Intelligence (AI); Business Technology; Compliance; Data Governance; Data Privacy; Digital Technology; Emerging Technologies; EU Data Privacy; Global Privacy; Privacy Compliance; Privacy Laws; Risk Control; Risk Management; Strategy Development.

Compensation:

Compensation offered for this role is $140,000.00 – $195,000.00 annually and is based on experience and qualifications.

The candidate(s) offered this position will be required to submit to a background investigation.

Allstate generally does not sponsor individuals for employment‑based visas for this position.

Effective July 1, 2014, under Indiana House Enrolled Act (HEA) 1242, it is against public policy of the State of Indiana and a discriminatory practice for an employer to discriminate against a prospective employee on the basis of status as a veteran by refusing to employ an applicant on the basis that they are a veteran of the armed forces of the United States, a member of the Indiana National Guard or a member of a reserve component.

It is the Company’s policy to employ the best qualified individuals available for all jobs. Therefore, any discriminatory action taken on account of an employee’s ancestry, age, color, disability, genetic information, gender, gender identity, gender expression, sexual and reproductive health decision, marital status, medical condition, military or veteran status, national origin, race (including traits historically associated with race, including, but not limited to, hair texture and protective hairstyles), religion (including religious dress), sex, or sexual orientation that adversely affects an employee’s terms or conditions of employment is prohibited. This policy applies to all aspects of the employment relationship, including, but not limited to, hiring, training, salary administration, promotion, job assignment, benefits, discipline, and separation of employment.