Senior Managing Counsel, Privacy, AI & Data Responsibility

Lead, develop, and manage a team of global privacy counsel across multiple jurisdictions, guiding business strategy, setting priorities, coaching team members, and ensuring consistent, high-quality privacy support for CNPF businesses globally.

Define and execute CNPF's privacy and AI legal strategy, aligned with Mastercard's enterprise Privacy, AI & Data Responsibility programs and CNPF's business objectives.

Serve as a trusted advisor to CNPF executives, product leaders, and law department leadership, escalating material risks and recommending pragmatic solutions aligned to defined risk appetite.

Represent CNPF in enterprise privacy and AI governance forums and drive consistency of positions across businesses and regions.

Oversee Privacy by Design reviews, data protection impact assessments, and data flow analysis for new and existing CNPF products, including commercial cards and B2B payments, SME solutions, cross-border and account-to-account transfers, and regulated money transmission.

Advise on global privacy and data protection laws, including the GDPR and UK GDPR and equivalent regimes in the Americas, Asia Pacific, and the Middle East and Africa, along with financial privacy, banking secrecy, and data localization requirements.

Guide international data transfer strategy, including transfer mechanisms, transfer risk assessments, and localization constraints affecting cross-border payment flows.

Advise on the data protection implications of digital asset and stablecoin activities, including blockchain data processing, travel rule and AML data sharing, and reconciling distributed ledger design with data subject rights.

Develop contract structures and negotiate privacy, data protection, and AI terms with customers, partners, vendors, and acquired entities, and support the integration of acquired businesses into Mastercard's privacy program.

Lead legal support for AI governance across CNPF, including AI risk and impact assessments, model and training data use reviews, and implementation of requirements under the EU AI Act and other emerging AI laws and frameworks.

Advise on AI-enabled products and capabilities embedded in CNPF products, including any initiatives involving agentic commerce, AI-driven fraud and risk models, automated decision-making, and generative AI use cases, ensuring responsible and lawful data use.

Partner with product, data science, and engineering teams to design practical controls for data responsibility, transparency, and explainability.

Monitor and assess legislative and regulatory developments in privacy, AI, and data, briefing business and legal leadership on impacts to CNPF operations, customers, and partners.

Support engagement with data protection authorities and financial regulators, including regulatory inquiries, examinations, and incident and breach response.

Manage outside counsel effectively and within budget.

Law degree and qualification to practice in a specified jurisdiction.

Experience in privacy and data protection, gained at a leading law firm, in-house at a global financial services or technology company, or both.

Demonstrated, substantive experience advising on AI legal and governance matters, including the EU AI Act, AI risk assessment, and data use for model development and deployment.

Proven experience leading and developing teams of lawyers, including across geographies, and influencing senior executives.

Deep expertise in the GDPR and UK GDPR, with strong working knowledge of global privacy regimes and international data transfer frameworks.

Experience engaging with the ICO, EU data protection authorities, or other privacy regulators.

Ability to understand complex technical architectures and data flows and to explain legal concepts clearly to business, technical, and executive audiences.

Sound judgment, a pragmatic and solutions-oriented approach, and the ability to balance innovation with risk in a fast-moving environment.

Excellent written and oral communication, analytical, and interpersonal skills.

Responsibility for information security, including abiding by Mastercard's security policies and practices, ensuring the confidentiality and integrity of accessed information, reporting suspected security violations or breaches, and completing periodic mandatory security training.