Privacy & AI Governance Counsel

Orion; Omaha (NE); Hybrid; USD 95,000 - 147,000; Full time

Job summary

Orion is seeking a Privacy & AI Governance Counsel to serve as the enterprise advisor on privacy, AI governance, and responsible technology use. This role partners with Legal, Information Security, Compliance, Product, and Technology to embed privacy principles into operations and products.

The position requires a Juris Doctor and 3+ years of relevant experience, with a hybrid work model and on-site days at a listed office location. Commutable to an Orion office is preferred.

Qualifications

• Minimum JD required; admission to the bar.
• 3+ years in privacy, data protection, AI governance, compliance, cybersecurity, or related field.
• Experience supporting privacy programs within regulated industries preferred.
• Ability to translate legal and regulatory requirements into practical business guidance.
• Strong collaboration across Legal, Compliance, Information Security, Technology and business teams.

Responsibilities

• Serve as the primary enterprise advisor for privacy and AI governance, partnering with leaders to embed privacy principles into processes, products, and decisions.
• Develop and maintain privacy and AI governance frameworks, policies, standards, and controls.
• Translate regulatory requirements into practical business guidance that enables innovation while mitigating risk.
• Monitor evolving privacy, security, and AI regulations and their impact on operations.
• Investigate incidents, conduct root cause analyses, oversee remediation, and resolve risks.
• Lead privacy compliance activities including PIAs, data mapping, and regulatory reporting.
• Negotiate privacy and data protection provisions in contracts and vendor agreements.
• Deliver privacy, AI governance, and data protection training across the organization.
• Establish and report governance metrics and indicators to leadership.
• Support resilience and crisis management involving privacy, cybersecurity, and AI incidents.

Skills

Privacy laws knowledge

AI governance

Regulatory interpretation

Risk assessment

Analytical skills

Communication

Project management

Cross-functional collaboration

Independent work

Education

Juris Doctor (J.D.)

Job description

About this Opportunity:

As a Privacy & AI Governance Counsel, you will serve as Orion's lead advisor on privacy, AI governance, and responsible technology use across the enterprise. Reporting to the Risk Officer, this role partners with business leaders, Legal, Information Security, Compliance, Product, and Technology teams to embed privacy and responsible AI principles into business operations, products, and strategic initiatives. The position oversees privacy compliance programs, manages privacy and AI-related risks and incidents, and ensures adherence to applicable U.S. and international privacy laws and regulations. This role also provides legal guidance on emerging technologies, vendor relationships, data governance, and AI implementation while supporting Orion's commitment to innovation and regulatory compliance. As we continue to evolve and live our Orion values, we are looking for someone to grow with us.

It is anticipated that an incumbent in this role will work as a Hybrid employee, with three (3) or more days each week required on-site at one of the listed office locations.

Candidates should be located within a commutable distance to an office. Internal candidates currently aligned to an Orion office location may be given preference; however, internal candidates with varying work arrangements may be considered based on experience and business needs. Work location is subject to change based on business needs.

In this role, you'll get to:

• Serve as the primary enterprise advisor for privacy and AI governance, partnering with business leaders to integrate privacy and responsible AI principles into processes, products, services, and decision-making


• Develop, maintain, and enhance privacy and AI governance frameworks, policies, standards, and controls aligned with organizational objectives and regulatory requirements


• Translate legal and regulatory requirements into practical business guidance that enables innovation while mitigating privacy and AI-related risks


• Monitor, assess, and communicate the impact of evolving privacy, security, and AI regulations on business operations


• Investigate privacy and AI-related incidents, conduct root cause analyses, oversee remediation activities, and ensure timely resolution of identified risks


• Lead enterprise privacy compliance activities, including privacy impact assessments, AI risk assessments, records of processing activities, data mapping, and regulatory reporting


• Manage Data Subject Rights Request (DSRR) processes and support regulatory inquiries, audits, examinations, and investigations


• Review and negotiate privacy and data protection provisions within contracts, vendor agreements, and third-party risk assessments


• Collaborate with Legal, Information Security, Compliance, Product, Technology, and business teams to address privacy and AI governance requirements


• Develop and deliver privacy, AI governance, and data protection training programs to increase organizational awareness and compliance


• Establish, monitor, and report key privacy and AI governance metrics, risks, and compliance indicators to leadership


• Support enterprise resilience and crisis management activities involving privacy, cybersecurity, and AI-related incidents


• Maintain governance inventories for privacy and AI systems, including automated decision-making technologies and high-risk processing activities


• Provide legal guidance regarding data minimization, purpose limitation, transparency, profiling, automated decision-making, and emerging AI regulations


• Drive continuous improvement initiatives that enhance privacy operations, governance effectiveness, and regulatory readiness

We're looking for talent who:

• Has strong knowledge of privacy laws and regulations, including U.S. state privacy laws, GDPR, and emerging AI governance requirements


• Has knowledge of AI governance, automated decision-making systems, data lifecycle management, and responsible AI principles


• Interprets complex legal, regulatory, and compliance requirements and translates them into actionable business recommendations


• Has strong risk assessment, issue resolution, and investigative skills


• Has experience conducting privacy impact assessments, AI risk assessments, and privacy compliance reviews


• Reviews, drafts, and negotiates contractual privacy and data protection provisions


• Has strong analytical and problem-solving skills with sound judgment and decision-making capabilities


• Has excellent written and verbal communication skills, including the ability to present complex concepts to executive leadership


• Builds relationships and influences stakeholders across all organizational levels without direct authority


• Has strong project management and organizational skills with the ability to manage multiple priorities simultaneously


• Uses effective collaboration skills across Legal, Compliance, Information Security, Technology, and business functions


• Works independently in a fast-paced, highly regulated environment


• Has a minimum of a Juris Doctor (J.D.) degree


• Has a minimum of 3 years of experience in privacy, data protection, AI governance, compliance, cybersecurity, legal, risk management, or a related field


• Has experience supporting privacy compliance programs and regulatory requirements within financial services, fintech, wealth management, investment advisory, or similarly regulated industries preferred


• Has experience managing privacy incidents, regulatory inquiries, audits, vendor risk assessments, and data governance initiatives preferred


• Has experience advising on AI governance, emerging technologies, or automated decision-making systems preferred


• Has demonstrated experience working cross-functionally with legal, compliance, security, technology, and business teams

#LI-AP1

#LI-Onsite

#LI-Hybrid

Recommended Skills

AI Governance, AI Programming, AI Risk Management, Artificial Intelligence Ethics, Compliance Programs, Cybersecurity Law, Data Governance, Data Privacy, Data Protection, Data Protection Privacy, Good Governance, Privacy by Design, Privacy Compliance, Privacy Impact Assessments, Responsible AI

Salary Range

$94,869.00 - $146,945.00

The pay listed in this posting indicates the estimated pay at the time of this posting; however, may vary depending on geographic location, job-related knowledge, skills, and experience. In addition, Orion offers a competitive benefits package which includes health, dental, vision, and disability coverage on day one, 401(k) plan with employer match, paid parentalleave, pet benefits including pawternity leave and pet insurance, student loan repayment and more.

About Us

At Orion, we achieve our best work when we support one another, staying personally accountable to each other and the clients we serve. We create a welcoming environment where everyone is respected, valued, and heard. Our commitment to create raving fans ensures we consistently exceed client expectations. Thinking differently is in our DNA—we innovate always, push boundaries, and reject the status quo to deliver transformative outcomes. Together, we support one another and see it through to success, driving our collective achievements and those of our clients.