Assistant General Counsel - Privacy and Technology

The role

This person provides legal counsel for privacy, technology, information law, and data governance. They will serve as the designated Privacy Officer and lead the legal approach for technology contracting and cybersecurity incident response.

What you will do

• Owns the legal design and standards of the third-party risk management framework.
• Structures, drafts, and negotiates complex technology, data, and services agreements.
• Serves as the organization's designated Privacy Officer.
• Oversees legal aspects of privacy operations including statements, notices, and policies.
• Owns the legal framework for information law and data governance.
• Provides legal counsel on data ownership, licensing, and artificial intelligence governance.
• Serves as the primary legal advisor for data breach and cybersecurity incidents.
• Monitors, researches, and interprets legal and regulatory developments.
• Provides counsel across the department's practice areas as needed.

Required qualifications

• Juris Doctor from an American Bar Association accredited law school.
• Admission to practice law in at least one U.S. state, with a professional license in Minnesota, Wisconsin or Illinois or the ability to obtain one within the first year.
• Expert-level experience in a law firm, corporate legal department, or regulated financial institution, or an equivalent combination of legal and relevant professional experience sufficient to perform
• Experience advising on intellectual property data use and analytics, insurance data security requirements, including electronic signature and electronic records law, including authentication, admissib
• Experience serving in a formally designated privacy-officer capacity or demonstrated readiness to serve.
• Expert knowledge of privacy and data protection law, including the Gramm-Leach-Bliley Act, state and federal privacy laws applicable to financial institutions, and AI governance, and data breach notif
• Skill in structuring, drafting, and negotiating complex technology agreements, including SaaS, AI, cloud, licensing, and data processing arrangements.
• Functional knowledge of common cybersecurity, AI, privacy, and IT risk management frameworks, such as the NIST Cybersecurity Framework/CIS Controls, NIST Privacy Framework, ISO 27001, and AI Risk Mana
• Skill in applying legal principles to complex, ambiguous business problems and making risk-based legal decisions.
• Strong oral and written communication skills.
• Strong negotiation, influencing, and relationship-building skills.
• Familiarity with using AI-enabled tools to support legal research, drafting, and workflows.

Nice to have

• International Association of Privacy Professionals (IAPP) certification (CIPP/US, CIPM, or CIPT) or equivalent employment history
• Experience advising on data breach or cybersecurity incident response, or technical expertise in data security, information technology, or SaaS and cloud solutions
• Experience in financial services or another regulated industry

Benefits

• Hybrid model – up to 50% work from home
• Flexible schedules including ample flexibility in the summer months
• Up to 9% towards 401k (3% fixed Compeer contribution plus up to 6% match)
• medical, dental, vision, HSA/FSA, life & AD&D insurance, short-term and long-term disability, wellness program & EAP
• Vacation, sick leave, holidays/floating holidays, parental leave, and volunteer paid time off
• Learning and development programs
• Mentorship programs
• Cross-functional committee opportunities
• Professional membership/certification reimbursement

Before you apply

• Must be authorized to work for any employer in the United States.
• Compeer is unable to sponsor or take over sponsorship of an employment visa at this time.

About the company

Compeer Financial is a member-owned cooperative located in Illinois, Minnesota and Wisconsin. They provide financial services to support agriculture and rural communities.