Compliance Counsel

Amentum•Washington, DC

1d•$128,000 - $180,000•Hybrid

About The Position

Amentum seeks a Compliance Counsel to safeguard the organization by ensuring legal integrity and compliance with global regulations. Approximately 75% of the role focuses on leading the global data privacy compliance program, with the remaining 25% devoted to corporate compliance initiatives, ethics, and risk management. The position is hybrid, with on-site work two days per week at Amentum’s Reston, Virginia office. The role requires U.S. citizenship, a Juris Doctor degree from an accredited law school, and an active license in good standing with at least one state bar. Typically, candidates have five or more years of legal experience, with a strong focus on data privacy and corporate compliance.

Requirements

U.S. citizenship is required.
Juris Doctor (J.D.) degree from an accredited law school.
Active license in good standing with at least one state bar.
Typically, five or more years of legal experience practicing law, with a strong focus on data privacy and corporate compliance.
Deep operational knowledge of global data protection laws, including GDPR, CCPA, and HIPAA, and standard corporate compliance program frameworks.
Strong understanding of global data privacy laws and regulatory expectations, including GDPR and UK data protection requirements.
Ability to provide practical, business-oriented compliance guidance.
Ability to anticipate risks and identify emerging privacy and compliance trends.
Strong judgment, discretion, and decision-making skills.
Ability to build trusted relationships and operate effectively in a fast-paced environment.
Effective management of external counsel, including in multi-jurisdictional matters.
Excellent organizational, verbal, and written communication skills.
Experience preparing investigation reports and identifying patterns in incidents.
Ability to develop training and communication materials.
Self-starter with strong prioritization skills.
Ability to travel domestically and internationally as needed.
Growth mindset and enthusiasm for continuous learning.

Nice To Haves

In-house data privacy experience, ideally within a U.S.-based organization serving a significant UK/EU workforce or customer population.

Responsibilities

Design, implement, and maintain a global data privacy framework aligned with GDPR, CCPA/CPRA, and other global privacy laws.
Lead Data Protection Impact Assessments and data mapping initiatives to identify and mitigate privacy risks across business units.
Review, draft, and negotiate privacy terms in commercial contracts, including Data Processing Agreements and Business Associate Agreements.
Partner with Information Security and IT teams on investigations, containment strategies, and reporting obligations for potential personal data incidents or breaches.
Provide timely, practical advice on data privacy requirements, including U.S., UK, and EU frameworks.
Conduct privacy and compliance gap analyses and drive remediation efforts.
Develop, maintain, and refine privacy and corporate compliance policies, procedures, and practices.
Develop and deliver privacy and corporate compliance training, communications, and awareness initiatives.
Support internal audits and investigations relating to privacy and compliance issues.
Collaborate with compliance, legal, and operational teams across the organization.
Coordinate privacy and compliance matters handled by external counsel.
Conduct internal investigations into potential privacy or compliance concerns and recommend corrective actions in partnership with leadership teams.
Develop, review, and update corporate ethics and compliance policies, including the Code of Conduct and Anti-Bribery/Anti-Corruption policies.
Conduct or support objective investigations into reported violations of corporate policies or ethical standards, recommending corrective actions when necessary.
Monitor legislative and regulatory developments affecting the industry and advise leadership on proactive operational changes.
Promote adherence to the company Code of Conduct and serve as an ethical role model.
Perform other duties as assigned.