Jeppesen ForeFlight is seeking a qualified and motivated Counsel, Technology, Privacy & Regulatory Affairs, to join the Office of the General Counsel (OGC). Reporting to senior counsel in the OGC, this role supports a technology-focused legal portfolio spanning cybersecurity and information security, US data privacy, AI governance, compliance, government relations, and regulatory affairs. It is one of two newly created roles backfilling and maturing practice areas previously held by a departing attorney.
This position sits at the intersection of technology, policy, and law. The attorney will work closely with senior counsel and the broader OGC team on some of the most dynamic and consequential legal questions in the company's portfolio, including AI governance frameworks, emerging privacy obligations, and global regulatory developments. While the role has core areas of responsibility, we expect the scope to evolve as business needs change - attorneys in the OGC are expected to flex across the department's priorities and contribute wherever needed.
Key Responsibilities- Support cybersecurity and information security legal matters, including incident readiness planning, incident response, and coordination with the information security and IT teams.
- Support US aspects of privacy program, including compliance with applicable state and federal privacy laws; includes privacy review of vendor and procurement matters.
- Support the company's AI governance framework, assisting with internal legal review and approval processes for new AI features, vendors, and use cases, .
- Support government relations work related to AI policy and emerging regulatory developments.
- Contribute to the compliance program, providing legal capacity and coverage across internal compliance needs.
- Support regulatory matters, including readiness under the EU AI Act, the EU Product Liability Directive, and consumer protection regulations.
- Develop templates, playbooks, and guidance materials that improve consistency and scalability across supported practice areas.
- Take on additional legal matters and projects across the OGC as business needs evolve; core responsibilities are a starting point, not a ceiling.
Basic Qualifications- Juris Doctor from an accredited law school.
- Active bar membership and good standing in at least one jurisdiction.
- Minimum of 3 years of relevant legal practice experience, ideally a mix of in-house and law firm experience.
- Experience in two or more of the following: data privacy, cybersecurity, technology regulation, AI law and governance, and compliance.
- Excellent written and verbal communication skills.
- Demonstrated ability to provide practical, business-focused advice and to manage multiple priorities in a collaborative environment.
Preferred Qualifications- In-house legal experience in technology, software, AI, or related industry environment.
- Experience with privacy program management and data protection.
- Experience with cybersecurity incident response or information security legal matters.
- Familiarity with AI governance frameworks, AI regulatory developments, or AI ethics and policy.
- Knowledge of EU regulatory frameworks, including the EU AI Act, the General Data Protection Regulation (GDPR), or the EU Product Liability Directive.
- Familiarity with US privacy law frameworks, including CCPA and applicable state consumer privacy laws.
- Experience supporting compliance programs or government relations in a technology company.
- Experience in a regulated industry such as aviation, aerospace, or enterprise software.
- Experience working in a collaborative, cross-functional environment alongside product, engineering, and security teams.
Pay is based upon candidate experience and qualifications, as well market and business considerations: Summary Pay Range: $113,000-$135,000
