Sr. Data Privacy & Risk Counsel

About Engine

Engine is the AI-native platform for intelligent travel. For a decade, Engine has built the proprietary technology and supply behind modern business travel, serving over 38,000 customers and nearly 2 million travelers, along with leading travel and AI companies that build on Engine's infrastructure. One system powers business travel, group travel, human agents, and AI agents.

That work has earned recognition as one of Fast Company's Best Workplaces for Innovators (2025), TravelTech's Reservation Platform of the Year (2026), and one of Built In's Best Places to Work (2020–2026).

We're looking for bold, ambitious people to help redefine how businesses manage and experience travel. Working here, you can expect exponential growth, an ambitious pace, full ownership, and high-caliber colleagues who push you to do the best work of your career. Every hire raises the bar.

Come outpace the ordinary and build the future of travel with us.

Your Mission

As part of the Engine team, you’ll play a vital role in an environment where innovation meets collaboration. Here’s what you’ll take charge of:

Core Privacy & Risk Architecture:

Craft and execute innovative strategies to build and operate Engine’s enterprise data privacy, AI governance, and risk management function, ensuring Engine stays ahead in the regulatory landscape.

Cross-Functional Risk Integration:

Collaborate with cross-functional teams like Security, Product, and Finance to unlock new opportunities and deliver seamless, legally compliant experiences for our customers.

Program & Framework Leadership:

Lead the design and implementation of automated workflows (such as CCPA/CPRA handling) and structured frameworks (including AI governance and tiered vendor risk programs) to enhance efficiency, scalability, and corporate compliance.

Strategic Legal Advisory:

Provide exceptional support and insights to our clients and internal partners, ensuring every risk evaluation and incident response interaction with Engine exceeds expectations.

What You’ll Bring to Engine

• We’re looking for someone who’s ready to make an impact and grow alongside us:
• Experience: 4–6 years of hands-on experience in privacy law, either in-house or at a firm with an established privacy practice, backed by a J.D. with an active bar admission in good standing.
• Skills: You’re a problem-solver with deep working knowledge of CCPA/CPRA, US state privacy law frameworks, and FTC Section 5 standards, and you thrive in fast-paced, innovative environments.
• Tech-Savvy: Bonus points if you’re fluent in OneTrust or similar privacy management platforms.
• Mindset: You’re ready to roll up your sleeves, collaborate across the enterprise, protect material findings through structural privilege, and deliver results that matter.
• Applications for this role will be accepted through 10/23/26 or until the role is filled. We encourage you to apply early, as we may begin reviewing applications before the deadline.