Sr. Data Privacy & Risk Counsel

At Engine, we’re transforming business travel into something personalized, rewarding, and simple. For too long, managing travel and spend has been overwhelming and fragmented — we’re here to change that. We believe the future of travel should be seamless and powered by technology that delights customers at every step. That’s why we’re building a platform that brings together corporate travel, a powerful charge card, and modern spend management in one place.

To make this vision real, we’re looking for exceptional, mission-driven people to help redefine how businesses manage and experience travel.

More than 30,000 companies already rely on Engine to support over 1 million travelers and billions in annual bookings each year. Cash flow positive with rapid growth, we pair exclusive Engine-only rates, industry-leading rewards, and intelligent automation to help businesses save money while delivering world-class personalization and convenience.

Backed by Telescope Partners, Blackstone, and Permira, Engine has been recognized as one of the fastest-growing travel and fintech platforms in North America, with honors including the Deloitte Fast 500 and Built In’s Best Places to Work.

As part of the Engine team, you’ll play a vital role in an environment where innovation meets collaboration. Here’s what you’ll take charge of:

• Core Privacy & Risk Architecture: Craft and execute innovative strategies to build and operate Engine’s enterprise data privacy, AI governance, and risk management function, ensuring Engine stays ahead in the regulatory landscape.
• Cross-Functional Risk Integration: Collaborate with cross-functional teams like Security, Product, and Finance to unlock new opportunities and deliver seamless, legally compliant experiences for our customers.
• Program & Framework Leadership: Lead the design and implementation of automated workflows (such as CCPA/CPRA handling) and structured frameworks (including AI governance and tiered vendor risk programs) to enhance efficiency, scalability, and corporate compliance.
• Strategic Legal Advisory: Provide exceptional support and insights to our clients and internal partners, ensuring every risk evaluation and incident response interaction with Engine exceeds expectations.

We’re looking for someone who’s ready to make an impact and grow alongside us:

• Experience: 4–6 years of hands-on experience in privacy law, either in-house or at a firm with an established privacy practice, backed by a J.D. with an active bar admission in good standing.
• Skills: You’re a problem-solver with deep working knowledge of CCPA/CPRA, US state privacy law frameworks, and FTC Section 5 standards, and you thrive in fast-paced, innovative environments.
• Tech-Savvy: Bonus points if you’re fluent in OneTrust or similar privacy management platforms.
• Mindset: You’re ready to roll up your sleeves, collaborate across the enterprise, protect material findings through structural privilege, and deliver results that matter.

Applications for this role will be accepted through 10/23/26 or until the role is filled. We encourage you to apply early, as we may begin reviewing applications before the deadline.