Privacy Counsel

Responsibilities Advise business, product, engineering, compliance, risk, and legal stakeholders on privacy and data protection requirements applicable to embedded finance offerings, including the Gramm‑Leach‑Bliley Act, state privacy laws, California Consumer Privacy Act, California Privacy Rights Act, General Data Protection Regulation, Fair Credit Reporting Act, Health Insurance Portability and Accountability Act, and related frameworks. Partner with cross‑functional teams to identify privacy implications, conduct risk assessments, and implement practical, scalable privacy‑by‑design controls across the product lifecycle. Advise on banking‑as‑a‑service program structures and privacy‑related compliance considerations across sponsor banks, program managers, processors, consumer‑facing partners, and other third parties. Draft, review, and negotiate privacy and data protection terms in commercial and technology agreements, including data use, licensing, vendor, service provider, customer, and data transfer agreements. Lead partner and vendor negotiations on privacy matters and participate in client‑facing discussions related to data use, compliance obligations, and contractual risk. Develop, maintain, and socialize privacy policies, notices, procedures, training materials, and tools that support accountability and consistent operational practices. Monitor changes in privacy laws and regulations and translate legal requirements into clear, actionable guidance for internal stakeholders. Requirements 6+ years of experience practicing law with substantial focus on privacy, data protection, financial services regulation, or related legal counseling. Experience advising on financial privacy laws and frameworks, including the Gramm‑Leach‑Bliley Act, state privacy laws, and related U.S. regulatory requirements. Experience drafting, reviewing, and negotiating commercial, technology, vendor, customer, data use, or data protection agreements in financial services, payments, banking, or similar regulated environments. Experience supporting banks, financial technology companies, card networks, payments companies, or equivalent law firm clients in these sectors. Active license to practice law in at least one U.S. jurisdiction in good standing or equivalent legal authorization where applicable. Juris Doctor or Master of Laws from an accredited law school or equivalent combination of education, related experience and/or military experience. Hard Skills privacy law data protection risk assessment contract negotiation compliance legal counseling drafting agreements financial services regulation privacy‑by‑design data use agreements Soft Skills advising stakeholders cross‑functional collaboration client‑facing communication policy development training material creation monitoring legal changes translating legal requirements negotiation skills socializing policies operational accountability Certifications & Qualifications active law license Juris Doctor Master of Laws #J-18808-Ljbffr