Associate General Counsel - Privacy

TIAA•Charlotte, NY

3d•Onsite

About The Position

TIAA is seeking an Associate General Counsel – Privacy to join its Law & Policy team as a subject matter expert in privacy, cybersecurity, and data protection law. This attorney will serve as a trusted legal partner across business lines tackling high-impact legal questions spanning product innovation, emerging technology, data governance, and cybersecurity in one of the most dynamic areas of the law. The ideal candidate brings a strong foundation in global privacy law and product counseling, a growing fluency in AI and emerging technology, and the ability to work seamlessly across legal, technology, risk, compliance, and business teams.

Requirements

Doctoral Degree Required
5+ Years Required
5+ years of experience in privacy, data protection, and/or cybersecurity law, including advising on privacy compliance, product counseling, and commercial negotiations.
Accountability
Adaptability
Communication
Digital Savviness
Influence
Legal Collaboration / Consensus Building
Legal Counsel Expertise / Advisory
Legal Negotiation / Contract Management
Legal Risk Management
Legal Writing
Problem Solving
Relationship Management

Nice To Haves

7+ Years Preferred
7+ years of experience in privacy, data protection, and/or cybersecurity law, including advising on privacy compliance, product counseling, and commercial negotiations.
Experience advising on AI and emerging technology from a privacy and data protection perspective.
Exposure to cybersecurity governance or privacy incident response.
Financial services, fintech, or other regulated industry experience.
CIPP/US, CIPP/E, or other IAPP privacy certification.

Responsibilities

Be a Trusted Privacy & Cybersecurity Advisor — Serve as the go-to legal partner for business, product, and technology teams, providing practical, risk-calibrated guidance on domestic and international privacy and cybersecurity frameworks across a diverse and dynamic portfolio of initiatives.
Shape Products & Digital Experiences — Embed privacy-by-design thinking into the development and launch of new products, services, and digital experiences, from concept through deployment, ensuring legal requirements are met without slowing down innovation.
Navigate AI and Emerging Technology — Advise on the privacy and data protection dimensions of artificial intelligence, quantum computing, and other next-generation technology deployments, applying foundational privacy principles and evolving regulatory guidance to some of the most interesting and complex technology questions in the field today.
Build Something That Lasts — Partner with Risk and Compliance to develop governance frameworks, shape enterprise policy, and strengthen the organization's privacy and cybersecurity culture from the inside out
Lead When It Matters Most — Play an active role in cybersecurity governance and privacy incident response, including investigation, containment, and notification.
Drive Commercial Outcomes — Negotiate privacy and cybersecurity protections in vendor and strategic partnership agreements, directly reducing organizational risk while enabling the business to move forward with confidence.
Protects the organization's rights in contract negotiations, settlements, and litigation.
Identifies, evaluates, and addresses issues of legal risk.
Researches, analyzes, and interprets proposed and existing laws, statutes, and regulations.
Advises management on recent changes in laws and regulations that affect the company.
Liaises with external legal counsel on complex legal issues.