Description:

Ancestry is seeking a Senior Counsel, Data Security & Governance to provide practical, business-focused legal guidance across data protection, information security, third-party risk, AI governance, and incident response. This role partners closely with Security, Privacy, Product, Engineering, Data Science, Procurement, and Compliance teams to support a risk-based governance program that protects our users and enables responsible growth.

What You'll Do:

Advise on global data protection, data governance, and cybersecurity requirements applicable to Ancestry's products, services, and internal operations
Partner with Information Security to support governance of security programs and frameworks aligned with industry standards (e.g., ISO, NIST, SOC 2)
Provide legal oversight for third-party risk management, including vendor privacy and security reviews, risk assessments, and contractual protections
Support product, engineering, and data science teams with privacy-by-design and security-by-design guidance throughout the product lifecycle
Advise on legal, governance, and risk considerations related to AI and machine learning, including responsible use and impact assessments
Serve as legal counsel for security incidents and data breaches, including assessment, escalation, notification obligations, and remediation support
Review, assess, and respond to law enforcement, government, and regulatory requests for access to data
Draft, review, and maintain data security, governance, and related policies, standards, and guidance
Collaborate with cross-functional partners to operationalize governance requirements and drive consistent practices across the company
Monitor and interpret evolving privacy, cybersecurity, data governance, and AI-related laws, regulatory guidance, and enforcement trends
Travel occasionally on an as-needed basis.

Who You Are:

Juris Doctor (JD) or equivalent law degree from an accredited institution
Active bar membership in at least one U.S. jurisdiction
5+ years of relevant legal experience advising on privacy, data protection, cybersecurity, or technology matters
Experience counseling cross-functional teams in fast-paced, technology-driven environments
Strong judgment, communication skills, and ability to deliver practical guidance under ambiguity
Experience working with highly sensitive personal data
Familiarity with information security and governance frameworks (e.g., ISO, NIST, SOC 2)
Experience supporting incident response, regulatory engagement, or AI governance initiatives

Helping people discover their story is at the heart of ours. Ancestry is the largest provider of family history and personal DNA testing, harnessing a powerful combination of information, science and technology to help people discover their family history and stories that were never possible before. Ancestry's suite of products includes: AncestryDNA, AncestryProGenealogists, Fold3, Newspapers.com, Find a Grave, Archives.com, and Rootsweb. We offer excellent benefits and a competitive compensation package. For additional information, regarding our benefits and career information, please visit our website at http://ancestry.com/careers

As a signatory of the ParityPledge in Support of Women and the ParityPledge in Support of People of Color, Ancestry values pay transparency and pay equity. We are pleased to share the base salary range for this position: $164,000 - $205,000 with eligibility for bonus, equity and comprehensive benefits including health, dental and vision. The actual salary will vary by geographic region and job experience. We will share detailed compensation data for a specific location during the recruiting process. Read more about our benefits HERE. (http://www.ancestrybenefits.com/)