Assistant General Counsel, Global Data, Privacy & AI - CoStar Group - Arlington, VA

CoStar•Arlington, VA

About The Position

Assistant General Counsel, Global Data, Privacy & AI - CoStar Group - Arlington, VA Company Overview CoStar Group is a global leader in commercial real estate information, analytics, online marketplaces and 3D digital twin technology. Included in the S&P 500 Index and the NASDAQ 100, CoStar Group is on a mission to digitize the world’s real estate—empowering people to discover properties, insights, and connections that improve their businesses and lives. With leading brands across commercial and residential real estate - including CoStar, LoopNet, Apartments.com, Homes.com, STR, Matterport and other global online marketplaces - CoStar Group delivers trusted data, powerful analytics, and high-traffic online marketplaces that shape the future of the industry. Role Summary We are seeking a commercially savvy Assistant General Counsel, Global Data, Privacy & AI to lead and scale CoStar Group’s global privacy program across one of the world’s largest proprietary real estate data and marketplace platforms. This role will serve as a strategic partner to product, technology, and commercial teams—shaping privacy and AI governance, ensuring global regulatory compliance, and enabling responsible, high‑impact use of data that fuels our market‑leading analytics and online marketplaces. The ideal candidate is a pragmatic and forward‑thinking privacy leader who brings deep regulatory expertise, strong business judgment, and a proven ability to operationalize global privacy programs at scale within a fast‑moving, data‑intensive, technology‑driven organization.

Requirements

Bachelor’s degree from an accredited not-for-profit in person University or College required
Juris Doctor (JD) from an accredited law school and active bar membership in good standing with ability to practice in the state of Virginia
8–10 years of relevant legal experience, including a combination of top-tier law firm and in-house roles
Demonstrated experience leading and implementing global privacy programs within a data-driven or technology-enabled organization
Strong knowledge of global privacy and data protection laws and frameworks (e.g., GDPR, CCPA/CPRA, and other international regimes)
Required certifications: CIPP/US
Proven ability to operate as a strategic business partner with a commercial mindset
Experience embedding privacy and data considerations into the product lifecycle
Proven experience partnering with product development teams to enable compliant data use in product development
Experience advising on legal and regulatory issues related to AI/ML, including model training, data provenance, and responsible AI use
Familiarity with emerging AI governance frameworks and global regulatory developments (e.g., EU AI Act, U.S. AI guidance)
Experience advising on data strategy, including the legal and regulatory considerations associated with leveraging data as an asset
Strong leadership skills with experience managing and developing teams
Excellent communication and stakeholder management skills, with the ability to influence at all levels of the organization
High level of judgment, integrity, and accountability

Nice To Haves

AIGP (Artificial Intelligence Governance Professional) certification
CIPP/EU
Experience in an information services, data analytics, or technology company
Familiarity with global data transfer mechanisms and cross-border data strategies
Experience working in a publicly traded company
Experience designing and implementing enterprise-wide data governance frameworks, including data classification, retention, and usage policies beyond personal data
Ability to advise on legal risks related to the use of non-personal, aggregated, or de-identified data

Responsibilities

Lead the development, implementation, and continuous improvement of the company’s global privacy program
Serve as the primary legal advisor on privacy, data protection, AI and information governance matters
Provide strategic, practical, and commercially focused counsel to business leaders on data use, product development, and risk mitigation
Ensure compliance with global data protection, AI and privacy laws and regulations, including GDPR, CCPA/CPRA, and other applicable frameworks
Partner cross-functionally with product, engineering, security, compliance, and business teams to embed privacy/AI-by-design principles
Oversee data governance frameworks, policies, and procedures across the organization
Manage regulatory inquiries, investigations, and interactions with data protection authorities
Monitor and interpret evolving AI and privacy laws and translate them into actionable business requirements
Lead privacy impact assessments (PIAs/DPIAs) and data mapping initiatives
Develop and deliver privacy and AI training and awareness programs
Manage outside counsel and external advisors as needed
Build and mentor a high-performing privacy team

Benefits

Comprehensive healthcare coverage: Medical / Vision / Dental / Prescription Drug
Life, legal, and supplementary insurance
Virtual and in person mental health counseling services for individuals and family
Commuter and parking benefits
401(K) retirement plan with matching contributions
Employee stock purchase plan
Paid time off
Tuition reimbursement
On-site fitness center and/or reimbursed fitness center membership costs (location dependent), with yoga studio, Pelotons, personal training, group exercise classes
Access to CoStar Group’s Diversity, Equity, & Inclusion Employee Resource Groups
Complimentary gourmet coffee, tea, hot chocolate, fresh fruit, and other healthy snacks