Counsel - Data Protection, Privacy & Cyber Security

Our vision for the future is based on the idea that transforming financial lives starts by giving our people the freedom to transform their own. We have a flexible work environment, and fluid career paths. We not only encourage but celebrate internal mobility. We also recognize the importance of purpose, well-being, and work-life balance. Within Empower and our communities, we work hard to create a welcoming and inclusive environment, and our associates dedicate thousands of hours to volunteering for causes that matter most to them.

Chart your own path and grow your career while helping more customers achieve financial freedom. Empower Yourself.

Counsel - Data Protection, Privacy & Cyber Security
Position Summary

Empower is transforming how Americans experience financial services, bringing together workplace retirement, personal wealth, and innovative financial solutions to help millions of people achieve their financial goals. With that scale comes an increasingly complex and evolving regulatory environment—and an opportunity for talented lawyers to build deep expertise while working on issues that matter across the enterprise.

We are seeking a Counsel – Privacy & AML to join Empower ’s Legal Department. This is an opportunity for an early-career attorney to develop expertise at the intersection of privacy, data protection, cybersecurity, anti-money laundering (AML), financial crimes, and financial services regulation while working alongside experienced attorneys and business partners across Empower .

You will provide legal research, analysis, and practical guidance on privacy and AML matters affecting Empower ’s businesses, products, customers, and operations. You will work closely with colleagues across Legal, Compliance, Financial Crimes, Risk, Technology, Cybersecurity, Product, Operations, and other functions to help Empower navigate evolving regulatory requirements and implement practical solutions.

This role is well suited for an attorney who is intellectually curious, enjoys learning new areas of law, and wants meaningful responsibility and exposure early in their career. You do not need to arrive as an expert in every area—we are looking for strong legal fundamentals, sound judgment, curiosity, and someone who wants to grow.
What You Will Do
Privacy, Data Protection & Cybersecurity

- Research, interpret, and provide legal guidance regarding federal, state, and evolving global privacy, data protection, cybersecurity, consumer protection, and related laws and regulations, including GLBA, state comprehensive privacy laws, FCRA, TCPA, CAN-SPAM, and other applicable requirements.

- Advise business partners on privacy and data protection requirements affecting Empower ’s products, services, operations, and customer interactions.

- Support the development, implementation, and maintenance of privacy policies, notices, procedures, and other compliance frameworks.

- Provide legal support regarding the collection, use, sharing, retention, and protection of personal information.

- Assist with legal issues involving cybersecurity, data incidents, information security, online privacy, and evolving technology and data practices.

- Review and draft privacy and data protection provisions in client, vendor, and other commercial agreements, and support contract negotiations and RFPs.

- Assist with records retention and information governance matters, including interpreting legal and regulatory retention requirements.

- Support regulatory examinations, inquiries, and other matters involving privacy, cybersecurity, data protection, and related issues.

- Monitor emerging privacy, cybersecurity, technology, and consumer protection developments and help translate new legal requirements into practical guidance for the business.

- Research and provide legal guidance on evolving laws, regulations, regulatory guidance, and industry standards governing artificial intelligence and other emerging technologies, including requi