The Senior Legal Counsel will play a strategic leadership role in shaping the legal, privacy, and AI governance frameworks supporting innovative digital products and consumer-facing platforms. This position will provide expert legal guidance across privacy, data protection, cybersecurity, artificial intelligence, and consumer financial services. Working closely with Product, Engineering, Marketing, Information Security, and Compliance teams, the successful candidate will help bring new digital capabilities and AI-driven solutions to market responsibly. The role combines sophisticated legal expertise with practical business counseling, risk management, and cross-functional collaboration. You will influence enterprise-wide AI governance initiatives while ensuring compliance with evolving federal and state regulations. This is an exciting opportunity for an experienced legal professional to shape responsible innovation in a technology-driven consumer finance environment.
Serve as lead legal counsel for privacy, consumer information, and digital engagement matters across the consumer journey, from prequalification through contract origination.
Advise on the collection, acquisition, processing, use, and sharing of consumer information, including Fair Credit Reporting Act (FCRA) permissible purposes, consumer-report authorizations, fraud prevention, notices, and consent requirements.
Provide legal guidance on vendor products and data solutions involving consumer reports and other regulated information, particularly for identity verification, income verification, fraud prevention, and digital consumer engagement.
Advise on consumer-facing digital communications, credit advertising, digital disclosures, adverse-action communications, and applicable consumer protection requirements, including the Truth in Lending Act (TILA) and Regulation Z.
Partner with Product, Engineering, Marketing, Compliance, and consumer finance legal teams to design and launch digital marketplace capabilities, taking ownership of the privacy, consumer-information, FCRA, and consumer-facing advertising frameworks.
Act as primary privacy and information security legal advisor to business and technical teams throughout the development and launch of new products, features, and initiatives.
Monitor developments in federal and state privacy, data protection, and cybersecurity regulations, including the Gramm-Leach-Bliley Act (GLBA) and FCRA, translating complex legal requirements into practical, risk-based business guidance.
Support enterprise privacy programs in collaboration with Information Security, Data Engineering, and Compliance, including privacy risk assessments, impact assessments, consumer privacy rights requests, data retention, and data minimization.
Draft, review, and negotiate data protection agreements, privacy provisions, data-use restrictions, audit rights, security schedules, and technology-related contractual arrangements.
Lead legal strategy and provide counsel during data breaches and cybersecurity incidents, including privilege considerations, notification obligations, and regulatory engagement.
Support the development and implementation of the enterprise AI governance framework, including policies, standards, risk classifications, and AI system inventories.
Design and maintain legal intake, review, and approval processes for AI tools and systems used across the organization.
Draft and negotiate AI-related contractual provisions covering acceptable use, data rights, AI training restrictions, model outputs, ownership, and allocation of responsibilities with dealers, technology providers, and vendors.
Establish legal standards for AI training data, model documentation, and data retention, using the NIST AI Risk Management Framework as a guiding standard.
Advise on consumer and dealer disclosures when AI technologies influence customer experiences, shopping journeys, or dealer interactions.
Monitor emerging federal and state AI legislation, regulatory guidance, and industry developments in collaboration with Government Relations.
Partner with other legal teams on AI applications involving credit, fraud, and funding decisions, addressing fair lending, ECOA/Regulation B, model governance, explainability, and adverse-action requirements.
Keep legal and business leadership informed of emerging regulatory developments, privacy and cybersecurity risks, and AI governance priorities.