Sr. Data Privacy & Risk Counsel

About the Position

We are seeking a Sr. Data Privacy & Risk Counsel to join our Engine team, ensuring compliance with CCPA/CPRA and US state privacy law frameworks.

About the Company

Engine is the all-in-one travel and spend management platform trusted by 38K+ businesses and groups representing 1.2M+ travelers. We're the retailer and the rails of business travel, the fastest-growing company in travel tech, built on a decade of proprietary technology, supply, and pricing no one else can replicate. Other travel and AI companies run on our infrastructure to book real trips, hold rates, and move payments, without building any of it themselves. We built it, AI-forward at every layer, from how travelers book to how the rails run.

That work has earned recognition as one of Fast Company's Best Workplaces for Innovators (2025), TravelTech's Reservation Platform of the Year (2026), and one of Built In's Best Places to Work (2020–2026).

We're looking for bold, ambitious people to help redefine how businesses manage and experience travel. Working here, you can expect exponential growth, an ambitious pace, full ownership, and high-caliber colleagues who push you to do the best work of your career. Every hire raises the bar.

Come outpace the ordinary and build the future of travel with us.

Responsibilities

As part of the Engine team, you’ll play a vital role in an environment where innovation meets collaboration. Here’s what you’ll take charge of:

• Core Privacy & Risk Architecture: Craft and execute innovative strategies to build and operate Engine’s enterprise data privacy, AI governance, and risk management function, ensuring Engine stays ahead in the regulatory landscape.
• Cross-Functional Risk Integration: Collaborate with cross-functional teams like Security, Product, and Finance to unlock new opportunities and deliver seamless, legally compliant experiences for our customers.
• Program & Framework Leadership: Lead the design and implementation of automated workflows (such as CCPA/CPRA handling) and structured frameworks (including AI governance and tiered vendor risk programs) to enhance efficiency, scalability, and corporate compliance.
• Strategic Legal Advisory: Provide exceptional support and insights to our clients and internal partners, ensuring every risk evaluation and incident response interaction with Engine exceeds expectations.

Requirements

• Experience: 4–6 years of hands-on experience in privacy law, either in-house or at a firm with an established privacy practice, backed by a J.D. with an active bar admission in good standing.
• Skills: Deep working knowledge of CCPA/CPRA, US state privacy law frameworks, and FTC Section 5 standards.
• Tech-Savvy: Bonus points if you’re fluent in OneTrust or similar privacy management platforms.
• Mindset: Ready to roll up your sleeves, collaborate across the enterprise, protect material findings through structural privilege, and deliver results that matter.

We Offer

• Compensation: Competitive base pay tied to role and experience, with opportunities for bonuses, commissions, and equity.
• Benefits: Check out our full list at engine.com/culture.
• Environments for Success: Different roles have different needs in terms of the environments that drive success which is why we have a hybrid-hub model. Whether you are in one of our amazing offices or fully remote, we’ll make sure you have what you need to succeed.

Perks and benefits may vary based on employment type, location, and more.

Apply for this Job

Applications for this role will be accepted through 10/23/26 or until the role is filled. We encourage you to apply early, as we may begin reviewing applications before the deadline.

Base Pay Range

$182,800 - $253,000 USD

Ready to Build the Future of Work Travel?

Join us on our mission to transform how work travel works-for businesses, for travelers, and for the industry. Apply now and let’s make travel simpler, smarter, and more enjoyable-together.