Senior AI Counsel

This is a fully remote position, open to applicants in United States.

📋 Description

• Provide guidance on the legal and regulatory aspects of Proof's application of AI and machine learning, which includes identity verification, biometric comparison, and fraud detection.

• Assist in the creation and operation of Proof's AI governance framework encompassing model risk, transparency, fairness, and evaluations of vendor AI.

• Counsel on automated decision-making, profiling, and bias-audit requirements, including compliance with New York City's Local Law 144 on automated employment decision tools (AEDTs) and the California CPPA's regulations on automated decision-making technology (ADMT), along with similar obligations arising in other states.

• Evaluate AI-related product features, training data methodologies, and AI clauses in agreements with customers and vendors.

• Act as Proof's legal consultant on international privacy and data protection, encompassing U.S. state privacy laws (CCPA/CPRA and the increasing array of state comprehensive laws), GLBA, biometric privacy laws such as BIPA, HIPAA when relevant, and GDPR/UK GDPR.

• Oversee and enhance Proof's privacy program: policies, data mapping, records of processing, privacy and data protection impact assessments, retention schedules, and privacy-by-design reviews for new products and features.

• Collaborate with commercial counsel on data processing agreements, standard contractual clauses, and privacy provisions with customers, vendors, and partners.

• Advise product and engineering teams on the management of identity data, biometrics, and notarization records throughout the entire data lifecycle.

• Handle consumer and data-subject rights requests, privacy notices, consent processes, and cookie/tracking compliance.

• Support the Government Affairs and Public Policy team in monitoring the changing privacy landscape and converting new obligations into practical, prioritized business guidance.

• Aid in RFPs, due diligence assessments, and audit responses.

• Partner with the security team regarding the legal elements of information security, readiness, security questionnaires, and commitments to customer security.

• Provide counsel on breach assessment and notification duties, and lead the legal response to security incidents.

• Assist with vendor security and risk evaluations along with the contractual security requisites that follow.

• Serve as a trusted advisor to executives and product leaders, delivering precise, risk-aware, business-focused counsel.

• Develop scalable training programs, playbooks, and self-service resources that enhance privacy and security awareness throughout the company.

• Support regulatory inquiries, audits, and customer due diligence activities.

⛳️ Requirements

• Juris Doctor (J.D.) and active membership in good standing with at least one U.S. state bar.

• Over 6 years of pertinent legal experience (law firm and/or in-house) with a significant emphasis on privacy and data protection.

• Extensive, up-to-date knowledge of U.S. privacy laws (CCPA/CPRA, state comprehensive laws, GLBA, BIPA) and working familiarity with GDPR.

• Proven experience in operationalizing privacy by not only identifying issues but also designing and executing programs that succeed in a dynamic product environment.

• Exceptional drafting and negotiation abilities related to DPAs and data-centric commercial terms.

• Strong judgment and communication skills, capable of translating intricate legal requirements into clear, actionable advice for non-lawyers.

• Ability to work independently and manage conflicting priorities in a high-growth environment.

• Experience providing advice on biometric data and/or e-signature and online notarization regulatory frameworks.

• Understanding of technology and machine learning principles.

• Background in identity, fintech, security, healthcare, or other regulated-data industries.

• Familiarity with AI/ML governance and emerging AI regulations (EU AI Act, NIST AI RMF).

• Practical knowledge of security frameworks (SOC 2, ISO, NIST) and incident response protocols.

🏝️ Benefits

• Medical, dental, and vision coverage

• Life insurance, as well as long and short-term disability benefits

• 401k Plan with a 4% matching contribution, starting from your hire date

• Unlimited sick leave and vacation time

• 14 paid holidays each year

• 12 weeks of paid parental leave

• 4-week sabbatical after 5 years of continuous full-time service

• Health Reimbursement Arrangements for fertility and gender affirmation purposes

• Lunch provided by Proof through Grubhub credit

• Monthly stipend for working from home

• Professional development funding

• Monthly wellness reimbursement

• And many more!