Sr. Data Privacy & Risk Counsel

Engine is the all-in-one travel and spend management platform trusted by 38K+ businesses and groups and 1.2M+ travelers. We're the retailer and the rails of business travel, the fastest-growing company in travel tech, built on a decade of proprietary technology, supply, and pricing no one else can replicate. Other travel and AI companies run on our infrastructure to book real trips, hold rates, and move payments, without building any of it themselves. We built it, AI-forward at every layer, from how travelers book to how the rails run.

That work has earned recognition as one of Fast Company's Best Workplaces for Innovators (2025), TravelTech's Reservation Platform of the Year (2026), and one of Built In's Best Places to Work (2020–2026).

We're looking for bold, ambitious people to help redefine how businesses manage and experience travel. Working here, you can expect exponential growth, an ambitious pace, full ownership, and high-caliber colleagues who push you to do the best work of your career. Every hire raises the bar.

Come outpace the ordinary and build the future of travel with us.

As part of the Engine team, you’ll play a vital role in an environment where innovation meets collaboration. Here’s what you’ll take charge of:

• Core Privacy & Risk Architecture: Craft and execute innovative strategies to build and operate Engine’s enterprise data privacy, AI governance, and risk management function, ensuring Engine stays ahead in the regulatory landscape.
• Cross-Functional Risk Integration: Collaborate with cross-functional teams like Security, Product, and Finance to unlock new opportunities and deliver seamless, legally compliant experiences for our customers.
• Program & Framework Leadership: Lead the design and implementation of automated workflows (such as CCPA/CPRA handling) and structured frameworks (including AI governance and tiered vendor risk programs) to enhance efficiency, scalability, and corporate compliance.
• Strategic Legal Advisory: Provide exceptional support and insights to our clients and internal partners, ensuring every risk evaluation and incident response interaction with Engine exceeds expectations.

We’re looking for someone who’s ready to make an impact and grow alongside us:

• Experience: 4–6 years of hands-on experience in privacy law, either in-house or at a firm with an established privacy practice, backed by a J.D. with an active bar admission in good standing.
• Skills: You’re a problem-solver with deep working knowledge of CCPA/CPRA, US state privacy law frameworks, and FTC Section 5 standards, and you thrive in fast-paced, innovative environments.
• Tech-Savvy: Bonus points if you’re fluent in OneTrust or similar privacy management platforms.
• Mindset: You’re ready to roll up your sleeves, collaborate across the enterprise, protect material findings through structural privilege, and deliver results that matter.

Applications for this role will be accepted through 10/23/26 or until the role is filled. We encourage you to apply early, as we may begin reviewing applications before the deadline.