Legal Counsel, Digital Data Compliance

Signature Aviation; Orlando (FL); On-site; USD 150,000 - 190,000; Full time

Benefits offered by this job

Medical Insurance

401(k)

Paid time off

Training and Development

Job summary

Signature Aviation seeks a Senior Legal Counsel, Digital & Data Compliance to lead privacy, data protection, and regulatory compliance across digital platforms and services. You will advise on AI, cloud, data governance, and cross-border data transfers while partnering with IT, product, and business teams to enable compliant innovation.

You will support third-party risk management, vendor contracts, and regulatory inquiries, with focus on GDPR, CCPA/CPRA, and emerging digital laws. A JD and U.S.

Qualifications

• Requires JD and active bar admission.
• Experience in cybersecurity, AI, and data privacy is required.

Responsibilities

• Lead privacy and data protection program and advise on data lifecycle practices.
• Monitor and interpret global privacy, data protection, AI, and cybersecurity laws; support governance.
• Review and negotiate DPAs, data sharing agreements, cross-border transfers, and tech contracts.
• Advise on digital transformation, cloud services, software licensing, SaaS, and related vendor agreements.
• Provide legal guidance on cyber risk, incident response, breach notification, and regulatory reporting.
• Contribute to internal AI governance frameworks and risk-mitigation strategies.

Skills

Privacy & data protection

Regulatory compliance

Cybersecurity knowledge

AI governance

Contract drafting & negotiation

Education

Juris Doctor (JD) from an accredited U.S. law school

Job description

Job Description

The Senior Legal Counsel, Digital & Data Compliance serves as a strategic legal advisor responsible for providing guidance on privacy, data protection, cybersecurity, digital technologies, artificial intelligence (AI), data governance, and regulatory compliance. This role partners closely with the business, technology, information security, product, marketing, and compliance teams to enable innovation while managing legal and regulatory risks associated with the collection, use, storage, transfer, and protection of data.

Responsibilities

Privacy and Data Protection

• Lead and support the Company’s privacy and data protection program.
• Provide guidance on data lifecycle practices, including collection, use, transfer, and retention of personal data.
• Support privacy-by-design initiatives across products, services, digital platforms, and business processes.
• Conduct and advise on privacy impact assessments, data protection impact assessments, risk assessments, and records of processing activities.
• Oversee third-party data compliance and partner with the IT, security, compliance, and business teams to implement effective privacy controls.
• Support privacy-related regulatory inquiries, audits, and investigations.

Regulatory Compliance & Governance

• Monitor, interpret, and advise on evolving global digital, privacy, data protection, AI, and cybersecurity laws and regulations, including GDPR, UK GDPR, CCPA/CPRA, PIPEDA, and other emerging frameworks.
• Support development and maintenance of compliance frameworks, policies, training programs, and governance practices.
• Advise executive leadership on legal and regulatory developments affecting digital operations.
• Support regulatory examinations, audits, investigations, and enforcement inquiries.
• Partner with compliance and risk management teams to implement effective governance structures.

Contracting & Commercial Support

• Review and negotiate data processing agreements (DPAs), data sharing agreements, cross-border data transfer mechanisms, and other privacy-related contract terms.
• Draft, review, and negotiate technology and digital services agreements, including software development, hosting, and managed services.
• Advise procurement and vendor management teams on third-party risk, data protection, cybersecurity, and compliance considerations.
• Support mergers, acquisitions, partnerships, and strategic transactions involving data and technology assets.

Digital & Technology Law

• Advise on legal issues related to digital transformation, cloud services, SaaS agreements, software licensing, e-commerce, and digital platforms.
• Counsel stakeholders on legal risks associated with emerging technologies such as AI, machine learning, blockchain, and digital identity solutions.
• Support product development teams throughout the product lifecycle.

Cybersecurity & Incident Response

• Provide legal guidance on cybersecurity governance and risk management.
• Support incident response activities, including breach assessments, notification obligations, regulatory reporting, and communications strategies.
• Advise on legal requirements relating to cyber resilience and security frameworks.
• Collaborate with Information Security and Compliance teams on cybersecurity policies and controls.

Artificial Intelligence & Emerging Technologies

• Provide insights that inform responsible AI use, bias mitigation protocols, and other risk-management safeguards. Review AI use cases, model deployment, vendor solutions, and contractual protections.
• Support the development of internal AI governance frameworks and policies.
• Assess legal risks related to automated decision-making, algorithmic transparency, and intellectual property.

Qualifications

• Juris Doctor (JD) from an accredited U.S. law school.
• Active member of the Florida Bar or Florida Authorized House Counsel in good standing.
• 5 years of relevant legal experience, preferably combining law firm and in-house practice.
• Experience in cybersecurity, AI, and data privacy.

Knowledge, Skills, And Abilities

• Deep knowledge of global privacy laws and digital regulations.
• Experience advising on cybersecurity incidents and regulatory investigations.
• Strong contract drafting and negotiation skills.
• Ability to communicate complex legal concepts to non-legal stakeholders.
• Excellent communication and stakeholder engagement skills, including interaction with senior leadership.
• Strong project management and cross-functional collaboration capabilities.

Preferred

• In-house experience within a technology, digital services, aviation, financial services, or highly regulated industry.
• Privacy certifications (e.g., CIPP/US, CIPP/E, CIPM, CIPT, or equivalent).
• Experience with AI governance and emerging technology regulation.
• Familiarity with cloud computing, SaaS platforms, data analytics, and cybersecurity frameworks (e.g., NIST, ISO 27001).

Travel

• Up to 5% travel required.

Physical Demands

• Standard office environment; ability to perform essential duties with reasonable accommodation as needed.

About Us

With more than 225 locations worldwide, Signature Aviation is the largest global network of private aviation terminals, delivering safe, convenient, and elevated experiences to those we serve. As a premier hospitality organization and a certified Great Place to Work™, we are committed to redefining private air travel. Our nearly 6,000-strong team of aviation experts and enthusiasts is dedicated to delivering excellence to our guests and communities, and it starts with taking care of our team. Signature provides a variety of benefits, programs, and resources to support our team members’ overall well-being and professional development. We proudly volunteer and give back, focusing on elevating the neighborhoods where we operate, empowering the next generation of aviation professionals, and supporting our veterans.

Our Benefits

• Medical/prescription drug, dental, and vision Insurance
• Health Savings Account
• Flexible Spending Accounts
• Life Insurance
• Disability Insurance
• 401(k)
• Critical Illness, Hospital Indemnity and Accident Insurance
• Identity Theft and Legal Services
• Paid time off
• Paid Maternity Leave
• Tuition reimbursement
• Training and Development
• Employee Assistance Program (EAP) & Perks

Qualified applicants will receive consideration for employment without regard to age, race, color, religion, sex, sexual orientation, gender identity, national origin, or other protected characteristics.