Senior Counsel - Privacy, Regulatory & Technology

Mastercard is hiring a Senior Counsel - Privacy, Regulatory & Technology in New York, United States. Level rates it ; you can apply on Mastercard.

Level's read on this job

Little AI ●○○○ is how Level rates this role: aI is not part of the work.
Tools and skills the posting cites include privacy law, regulatory compliance and contract negotiation.
Level classifies it as a senior role.
Level lists 1,100+ other open roles at Mastercard.
The role was posted within the past two weeks.

AI in this role

Provide legal counsel on privacy, regulatory, and technology matters with a focus on enterprise and credit risk product families.

privacy-lawregulatory-compliancecontract-negotiationdata-governance

Our Purpose

Mastercard powers economies and empowers people in 200+ countries and territories worldwide. Together with our customers, we’re helping build a sustainable economy where everyone can prosper. We support a wide range of digital payments choices, making transactions secure, simple, smart and accessible. Our technology and innovation, partnerships and networks combine to deliver a unique set of products and services that help people, businesses and governments realize their greatest potential.

Title and Summary

Senior Counsel - Privacy, Regulatory & Technology

Overview
Mastercard’s Privacy, Regulatory, and Technology team is seeking a Senior Counsel to provide support to the Services Business & Market Insights vertical, with a focus on the Enterprise and Credit Risk (ECR) product family. ECR is a significant and growing workstream that involves continued product innovation, evolving data architectures, and commercialization across global markets through strategic customer and partner engagements.
The role will serve as the primary legal lead for the ECR portfolio. The successful candidate will work closely with product, business, legal, regulatory, and technical stakeholders to translate a complex and evolving legal landscape into practical requirements for product development, data governance, contracting, and market expansion.

Role
• Serve as the primary legal lead for matters relating to Mastercard’s ECR products.
• Advise business, product, and technical teams throughout the product lifecycle, including privacy by design and regulatory reviews of new products, features, data uses, models, and go-to-market approaches.
• Establish and maintain legal compliance frameworks and internal controls addressing privacy, credit reporting, consent management, data subject rights, AI and automated decision-making, and model risk management.
• Coordinate legal analysis across jurisdictions and develop consistent positions for the application of local credit risk, privacy, AI, data use, and related regulatory requirements.
• Support the review of new markets and strategic partnerships, including the use of outside counsel where local legal analysis is required.
• Draft, review, and negotiate contract terms with strategic partners and key customers.
• Communicate legal requirements, risk assessments, open issues, and proposed controls clearly to business leaders, product teams, technical stakeholders, and other members of the Law Department.

All About You
• Juris Doctor from an accredited law school and admission to practice law in at least one U.S. jurisdiction.
• Advanced expertise in privacy and data protection law, with meaningful experience advising on credit reporting, lending, financial services, or other regulated data uses.
• Experience advising on AI, automated decision-making, model governance, data analytics, or related technology and data governance issues.
• Ability to analyze complex product and data architectures, identify applicable legal requirements across jurisdictions, and translate those requirements into practical controls and contractual terms.
• Strong written and oral communication skills, sound judgment, and the ability to work effectively with legal, business, product, regulatory, and technical stakeholders in a global organization.
• Demonstrated ability to manage multiple complex matters, operate independently in areas of ambiguity, and develop consistent legal positions across products, customers, and markets.

Mastercard is a merit-based, inclusive, equal opportunity employer that considers applicants without regard to gender, gender identity, sexual orientation, race, ethnicity, disabled or veteran status, or any other characteristic protected by law. We hire the most qualified candidate for the role. In the US or Canada, if you require accommodations or assistance to complete the online application process or during the recruitment process, please contact reasonable_accommodation@mastercard.com and identify the type of accommodation or assistance you are requesting. Do not include any medical or health information in this email. The Reasonable Accommodations team will respond to your email promptly.

Corporate Security Responsibility

All activities involving access to Mastercard assets, information, and networks comes with an inherent risk to the organization and, therefore, it is expected that every person working for, or on behalf of, Mastercard is responsible for information security and must:

Abide by Mastercard’s security policies and practices;
Ensure the confidentiality and integrity of the information being accessed;
Report any suspected information security violation or breach, and
Complete all periodic mandatory security trainings in accordance with Mastercard’s guidelines.

In line with Mastercard’s total compensation philosophy and assuming that the job will be performed in the US, the successful candidate will be offered a competitive base salary and may be eligible for an annual bonus or commissions depending on the role. The base salary offered may vary depending on multiple factors, including but not limited to location, job-related knowledge, skills, and experience. Mastercard benefits for full time (and certain part time) employees generally include: insurance (including medical, prescription drug, dental, vision, disability, life insurance); flexible spending account and health savings account; paid leaves (including 16 weeks of new parent leave and up to 20 days of bereavement leave); 80 hours of Paid Sick and Safe Time, 25 days of vacation time and 5 personal days, pro-rated based on date of hire; 10 annual paid U.S. observed holidays; 401k with a best-in-class company match; deferred compensation for eligible roles; fitness reimbursement or on-site fitness facilities; eligibility for tuition reimbursement; and many more. Mastercard benefits for interns generally include: 56 hours of Paid Sick and Safe Time; jury duty leave; and on-site fitness facilities in some locations. THIS POSTING RELECTS ONE OR MORE CURRENT VACANCIES ON OUR TEAM, AND MASTERCARD INTENDS TO FILL THIS POSITION BY 01/11/2027. If the fill date has passed, Mastercard intends to fill this position as soon as possible.

Pay Ranges

Purchase, New York: $204,000 - $325,000 USD

How we rate this

Senior Counsel - Privacy, Regulatory & Technology at Mastercard rates 10 out of 100 for how much of the daily work is AI. That makes it Little AI (AI Level 1 of 4). The level is about AI in the job, not seniority.

Classification

Little AI. AI is not part of the work.

●●●● Builds AI80 to 100
●●●○ Works on AI60 to 79
●●○○ Uses AI40 to 59
●○○○ Little AI0 to 39

Levels come from how often the tools, models and workflows of the role are named in the posting itself. Read the description and count the AI tools, models and workflows it names.

Key facts

Senior Counsel - Privacy, Regulatory & Technology is an open job at Mastercard.
Level rates this role AI Level 1 of 4: Little AI.
The role is based in Purchase, New York.
The job was posted on October 13, 2026.
Seniority: senior.
Applications are handled by Mastercard. Apply on Mastercard

Prepare for this job

Built from this posting and from similar jobs on Level.

Skills and AI tools this role asks for

Privacy LawRegulatory ComplianceContract NegotiationData Governance

Questions you could be asked

Tell me about a project where privacy law was part of your work. What did you do?
Tell me about a project where regulatory compliance was part of your work. What did you do?
Tell me about a project where contract negotiation was part of your work. What did you do?
Tell me about a project where data governance was part of your work. What did you do?

Adapt your resume

List these exact terms on your resume: Privacy Law, Regulatory Compliance, Contract Negotiation, and Data Governance. An applicant tracking system matches the wording, not the idea.
Attach one line of real, concrete experience to at least one of them. A tool named with nothing behind it rarely survives a human read.

Want an expert to read your CV for this job?

Free. Send your CV and the role you want next. We reply by email within 2 to 4 business days.

Get a free CV review Get an express CV review Check your resume with the ATS resume checker