Privacy Engagement Director

Our Purpose
Mastercard powers economies and empowers people in 200+ countries and territories worldwide. Together with our customers, we're helping build a sustainable economy where everyone can prosper. We support a wide range of digital payments choices, making transactions secure, simple, smart and accessible. Our technology and innovation, partnerships and networks combine to deliver a unique set of products and services that help people, businesses and governments realize their greatest potential.
Title and Summary
Privacy Engagement Director
The Privacy Engagement Director will provide technical legal guidance to support Mastercard's outreach and advocacy strategy across the evolving U.S. privacy, data, and AI regulatory landscape. This role will work closely with the U.S. Privacy, AI & Data Responsibility Team, Government Affairs, and the Global Privacy Engagement Lead to ensure consistent and effective internal and external positioning on privacy-related matters.
The position will dual-report to the VP Senior Managing Counsel Privacy, AI & Data Responsibility and SVP Assistant General Counsel for Privacy, AI & Data Responsibility in the Americas and will be a member of the Global Privacy, AI & Data Responsibility team (PAIR).
Key Responsibilities:
Cyber, Privacy, AI & Data laws have expanded across the globe, but particularly in the US. Understanding the implications that these rules have on our business and influencing developing data-driven laws is fundamental to the success of Mastercard's Corporate Strategy.
Monitor, analyze, and advise on emerging U.S. cyber, privacy and data laws, including state-level omnibus laws, data broker regulations, and AI governance proposals.
Partner with Mastercard's PAIR experts to help shape our advocacy and engagement efforts in the US, including for proposals and developments related on related topics which may include Artificially Intelligence, Data Sharing, the future of payments, data transfer and data localization requirements
At times lead, at times support, while always being engaged in advocacy and engagement efforts on U.S. cyber, privacy, AI, and data-related legislative and regulatory developments.
Develop policy briefings, FAQs, and internal guidance to identify risks and opportunities and reflect the external U.S. policy environment.
Draft and refine external messaging, submissions, and proposed legislative amendments to influence privacy and data-related laws.
Collaborate with U.S. policymakers, trade associations, think tanks, and other stakeholders to strengthen Mastercard's reputation as a trusted data steward.
Work cross-functionally with Public Policy, Regulatory, Legal, and Data Strategy teams to ensure alignment and consistency in advocacy efforts.
Qualifications:
Must be a licensed attorney, admitted to the bar in at least one U.S. jurisdiction and in good standing.
University degree required; advanced degree or CIPP certification is a plus.
Demonstrated expertise in U.S. cyber (CFAA, DSP), privacy and data regulatory frameworks (e.g., CCPA/CPRA, HIPAA).
Strong understanding of the intersection between cyber, privacy, AI, and data governance.
Experience engaging with policymakers, regulators, or industry associations.
Excellent communication, analytical, and strategic thinking skills.
Familiarity with financial services industry and payment processing a plus.
Mastercard is a merit-based, inclusive, equal opportunity employer that considers applicants without regard to gender, gender identity, sexual orientation, race, ethnicity, disabled or veteran status, or any other characteristic protected by law. We hire the most qualified candidate for the role. In the US or Canada, if you require accommodations or assistance to complete the online application process or during the recruitment process, please contact [email protected] and identify the type of accommodation or assistance you are requesting. Do not include any medical or health information in this email. The Reasonable Accommodations team will respond to your email promptly.
Corporate Security Responsibility
All activities involving access to Mastercard assets, information, and networks comes with an inherent risk to the organization and, therefore, it is expected that every person working for, or on behalf of, Mastercard is responsible for information security and must:

• Abide by Mastercard's security policies and practices;
• Ensure the confidentiality and integrity of the information being accessed;
• Report any suspected information security violation or breach, and
• Complete all periodic mandatory security trainings in accordance with Mastercard's guidelines.

In line with Mastercard's total compensation philosophy and assuming that the job will be performed in the US, the successful candidate will be offered a competitive base salary and may be eligible for an annual bonus or commissions depending on the role. The base salary offered may vary depending on multiple factors, including but not limited to location, job-related knowledge, skills, and experience. Mastercard benefits for full time (and certain part time) employees generally include: insurance (including medical, prescription drug, dental, vision, disability, life insurance); flexible spending account and health savings account; paid leaves (including 16 weeks of new parent leave and up to 20 days of bereavement leave); 80 hours of Paid Sick and Safe Time, 25 days of vacation time and 5 personal days, pro-rated based on date of hire; 10 annual paid U.S. observed holidays; 401k with a best-in-class company match; deferred compensation for eligible roles; fitness reimbursement or on-site fitness facilities; eligibility for tuition reimbursement; and many more.
Pay Ranges
Purchase, New York: $187,000 - $300,000 USD