Senior Regulatory Compliance Attorney

CB&I•The Woodlands, TX

3d•Hybrid

About The Position

The Senior Regulatory Compliance Attorney is responsible for supporting, enhancing, and helping implement the company’s comprehensive risk-based compliance framework; managing regulatory matters and examinations; protecting data and privacy; and mitigating regulatory and compliance risks across our global organization. The role requires a practical compliance attorney capable of independently managing compliance initiatives and helping mature compliance programs with limited supervision. The Senior Regulatory Compliance Attorney is an individual contributor role within CB&I’s dynamic legal group located across the USA, UK, and the UAE. This role is required to be in the office four days a week at our headquarters in The Woodlands, Texas, and will report directly to the Director of Legal and Corporate Compliance Officer, who oversees the company’s compliance, regulatory, litigation, and internal investigation matters.

Requirements

J.D., LL.M., or LL.B.
Licensed attorney in good standing in Texas, or licensed attorney in good standing in any other U.S. state with ability to qualify as Non-Texas-Licensed In-House Counsel Working in Texas under Texas laws and rules.
5+ years of substantial legal and compliance experience supporting, implementing, maintaining, and enhancing corporate compliance programs, regulatory compliance initiatives, or compliance frameworks (preferably multi-jurisdictional experience). Candidates should possess sufficient compliance expertise to independently lead compliance projects, develop policies and controls, conduct risk assessments, and recommend practical compliance solutions with limited supervision;
2+ years of data governance, data protection, and/or privacy experience;
2+ years of experience defending against regulatory inquiries, investigations, and enforcement proceedings, and interacting with regulators and supervisory authorities.
Strong compliance and regulatory experience, including supporting, maintaining, enhancing, or implementing compliance frameworks in a global or multi-jurisdictional environment and across multiple jurisdictions and borders.
Demonstrated ability to independently identify compliance risks, develop practical solutions, and manage compliance initiatives with limited supervision.
Ability to translate complex legal and regulatory requirements into practical operational controls and business processes.
Functional knowledge and expertise on U.S., GDPR, E.U., and/or U.K. regulatory, compliance, privacy, and data protection regulations and requirements.
Experience supporting, implementing, maintaining, or enhancing privacy and data protection frameworks and related compliance controls.
Employ a practical approach to regulatory compliance in operational environments.
Ability to work autonomously and proactively without frequent supervision.
Strategic thinker with strong analytical and problem-solving skills.
Business presence, polish, and credibility with regulators, leadership, and colleagues.
High emotional intelligence and interpersonal skills.
Strong written and verbal communication and presentation skills.
Fluent in English (speaking and writing).

Nice To Haves

Demonstrated experience supporting global companies with compliance needs and handling regulatory compliance matters across multiple jurisdictions;
Conducting internal investigations;
GDPR data governance, data protection, and privacy compliance;
Familiarity with ISO 27001, 27701, and NIST Privacy Framework
Certified Information Privacy Professional (CIPP), Certified Compliance and Ethics Professional (CCEP), or Certified Regulatory Compliance Manager (CRCM)

Responsibilities

Support, maintain, and enhance CB&I's enterprise compliance program across multiple jurisdictions;
Draft, revise, and implement policies, procedures, controls, and compliance guidance to support alignment with applicable laws, regulations, and industry standards;
Collaborate on all internal compliance matters, including without limitation, intersecting with trade compliance, export controls, cross-border regulatory requirements, and third-party due diligence;
Conduct risk assessments, identify root causes, develop mitigation strategies, implement and manage correction actions; and track compliance and remediation efforts;
Support and help lead supply chain and trade and export compliance.
Support and conduct confidential internal investigations;
Draft investigation reports;
Help manage the employee whistleblower hotline and metric reporting.
Assist with regulator, inspector, or supervisory communications. Help coordinate or lead productions, submissions, and responses to regulatory exams, audits, inquiries, remediation plans, incidents, or breaches;
Ensure alignment between regulatory requirements and internal policies and programs;
Provide guidance on aligning operational controls and initiatives with regulatory requirements.
Support privacy and GDPR initiatives, such as helping design, implement, and improve the company’s privacy framework and data protection program to ensure alignment with GDPR principles, accountability requirements, and supervisory authority expectations;
Draft and maintain GDPR-compliant privacy notices, polices, and procedures and conduct or assist with conducting periodic privacy monitoring and audits;
Support data protection impact assessments, privacy risk assessments, and privacy-related incident responses, including breach assessments, notification obligations, and coordination with regulators and external counsel, as needed.