Counsel - Data Protection, Privacy & Cyber Security

About this role

Our vision for the future is based on the idea that transforming financial lives starts by giving our people the freedom to transform their own. We have a flexible work environment, and fluid career paths. We not only encourage but celebrate internal mobility. We also recognize the importance of purpose, well-being, and work-life balance. Within Empower and our communities, we work hard to create a welcoming and inclusive environment, and our associates dedicate thousands of hours to volunteering for causes that matter most to them. Chart your own path and grow your career while helping more customers achieve financial freedom. Empower Yourself. Counsel - Data Protection, Privacy & Cyber Security Position Summary Empower is transforming how Americans experience financial services, bringing together workplace retirement, personal wealth, and innovative financial solutions to help millions of people achieve their financial goals. With that scale comes an increasingly complex and evolving regulatory environment—and an opportunity for talented lawyers to build deep expertise while working on issues that matter across the enterprise.

We are seeking a Counsel – Privacy & AML to join Empower’s Legal Department. This is an opportunity for an early-career attorney to develop expertise at the intersection of privacy, data protection, cybersecurity, anti-money laundering (AML), financial crimes, and financial services regulation while working alongside experienced attorneys and business partners across Empower. You will provide legal research, analysis, and practical guidance on privacy and AML matters affecting Empower’s businesses, products, customers, and operations. You will work closely with colleagues across Legal, Compliance, Financial Crimes, Risk, Technology, Cybersecurity, Product, Operations, and other functions to help Empower navigate evolving regulatory requirements and implement practical solutions. This role is well suited for an attorney who is intellectually curious, enjoys learning new areas of law, and wants meaningful responsibility and exposure early in their career. You do not need to arrive as an expert in every area—we are looking for strong legal fundamentals, sound judgment, curiosity, and someone who wants to grow. What You Will Do Privacy, Data Protection & Cybersecurity • Research, interpret, and provide legal guidance regarding federal, state, and evolving global privacy, data protection, cybersecurity, consumer protection, and related laws and regulations, including GLBA, state comprehensive privacy laws, FCRA, TCPA, CAN-SPAM, and other applicable requirements. • Advise business partners on privacy and data protection requirements affecting Empower’s products, services, operations, and customer interactions. • Support the development, implementation, and maintenance of privacy policies, notices, procedures, and other compliance frameworks. • Provide legal support regarding the collection, use, sharing, retention, and protection of personal information. • Assist with legal issues involving cybersecurity, data incidents, information security, online privacy, and evolving technology and data practices. • Review and draft privacy and data protection provisions in client, vendor, and other commercial agreements, and support contract negotiations and RFPs. • Assist with records retention and information governance matters, including interpreting legal and regulatory retention requirements. • Support regulatory examinations, inquiries, and other matters involving privacy, cybersecurity, data protection, and related issues. • Monitor emerging privacy, cybersecurity, technology, and consumer protection developments and help translate new legal requirements into practical guidance for the business. • Research and provide legal guidance on evolving laws, regulations, regulatory guidance, and industry standards governing artificial intelligence and other emerging technologies, including requirements relating to privacy, data use, transparency, automated decision-making, governance, and consumer protection. • Partner with Legal, Privacy, Compliance, Risk, Technology, Cybersecurity, Product, and other stakeholders on the responsible development, procurement, and use of AI-enabled tools and applications, including helping assess legal and regulatory considerations associated with new AI use cases.

AML & Financial Crimes • Research and analyze federal and state laws, regulations, regulatory guidance, and industry developments relating to anti-money laundering, Bank Secrecy Act requirements, sanctions, and financial crimes. • Provide legal support to Empower’s Compliance and Financial Crimes teams regarding the interpretation and application of AML and related regulatory requirements. • Assist with legal questions involving customer identification and verification, customer due diligence, transaction monitoring, suspicious activity, sanctions screening, and other components of Empower’s financial crimes compliance framework. • Support the review and development of AML and financial crimes policies, procedures, controls, and governance frameworks. • Assist with regulatory examinations, inquiries, internal reviews, and remediation efforts involving AML and financial crimes matters. • Monitor legislative, regulatory, and enforcement developments and work with senior attorneys and compliance partners to assess their potential impact on Empower’s businesses and operations. • Partner with attorneys across the Legal Department on matters where privacy, data use, fraud prevention, AML, sanctions, and other regulatory requirements intersect.

Business Partnership & Professional Development • Work closely with attorneys and business partners across Empower to identify legal issues, conduct research and analysis, and develop practical, business-focused solutions. • Prepare legal memoranda, regulatory analyses, summaries, presentations, policies, and other materials for legal and business audi

Similar jobs

• Legal Counsel, Data Security & Compliance — Plaud · San Francisco, CA
• Senior Counsel - Privacy, Cybersecurity and AI — Transamerica · Denver, Colorado | Work From Home, United States | Cedar Rapids, Iowa
• Cybersecurity Counsel — Waymo · Mountain View, CA, USA
• Data Privacy and Security Counsel (US Federal) — Workday · USA.VA.Reston
• Senior Legal Counsel - Privacy — Samsung Electronics · Plano, TX
• Managing Legal Counsel - Privacy — T. Rowe Price · Owings Mills, MD | Baltimore, MD
• Sr. Counsel, Privacy Compliance — Databricks · Bellevue, Washington; Boston, Massachusetts; Chicago, Illinois; Denver, Colorado; Seattle, Washington; Washington, D.C.
• Senior Counsel, Privacy and Regulatory — Fastly · New York City, NY; San Francisco, CA