Skip to content
CV Rocket
Get started
How it worksThe enginePricingBlogContactSign in

Open nowPosted 3 days ago

Product Counsel, Data & Privacy

Imprint20 open roles

Pay
$200,000 – $250,000 a year
Where
New York City
Work mode
Hybrid
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowProduct Counsel, Data & PrivacyImprint · New York City

  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on Imprint's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

12.3% of postings close within 7 days. Measured by our own scanner across the market. Imprint postings stay open a median of 45 days.

Share of postings closed within
  1. 2.1%1 day
  2. 4.5%3 days
  3. 12.3%7 days
  4. 19.3%14 days
  5. 35.6%30 days
  6. 57.8%60 days
This job: posted 3 days ago

Imprint median: 45 days open

The posting

WHO WE ARE

Imprint helps the world's best brands grow the lifetime value of their customers. We started with co-branded credit cards and rebuilt them to be smarter, more rewarding, and brand-first. We partner with companies like Crate & Barrel, Rakuten, Booking.com http://Booking.com, H-E-B, Fetch, and Shell to launch modern credit programs that deepen loyalty, unlock savings, and drive growth. But the card is just the beginning. We combine advanced payments infrastructure, intelligent underwriting, and deep customer data to create delightful and personalized experiences for members as well as efficient and profitable relationships for our brand partners. Our robust technology and world-class operations allow us and our brand partners to offer powerful financial products without becoming a bank.

In the U.S., co-branded cards alone account for over $300 billion in annual spend, and most still run on decades-old legacy bank systems. Imprint is the modern alternative: flexible, embeddable, and built for how people actually pay today. Backed by Kleiner Perkins, Thrive Capital, Ribbit, and Khosla Ventures, we're building a world-class team to redefine how people pay and how brands grow. If you want to move fast, solve hard problems, and own real outcomes, we want to meet you.

ROLE SUMMARY

We're looking for a Product Counsel, Data & Privacy to join our legal team as the first-line owner of data, privacy, and information-security legal work. Customer data is core to how Imprint's programs create value, and this role makes sure we share and protect that data the right way, advising on partner data sharing, privacy opt-outs, FCRA and credit data, GLBA/Reg P, data retention, and information security, while working at the pace of a startup that ships fast and takes its regulatory obligations seriously.

This is a high-ownership individual contributor role. You'll act as the first-line legal resource for data-sharing and privacy questions across our ongoing and launching programs. You'll have your own coverage areas from day one, direct access to senior leadership, and real influence on how customer data powers our products. You'll report to our Associate General Counsel and work alongside a small, experienced legal team, partnering closely with our Product Counsel, Data, and Security teams.

This role is ideal for a self-driven attorney who thrives in fast-moving environments, builds strong cross-functional relationships, and takes pride in owning work end-to-end.

WHAT SUCCESS LOOKS LIKE IN THE FIRST 90 DAYS

- Built strong working relationships with Data, Engineering, Security, and Compliance stakeholders.

- Taken ownership of day-to-day data-sharing and privacy opt-out reviews that require legal sign-off.

- Provided practical FCRA and GLBA/Reg P guidance on live matters and helped maintain the team's data-sharing and FCRA guides.

- Advised on data retention questions and at least one partner information-security or incident-response matter.

- Tracked and closed out legal requests with clear timelines and proactive communication to stakeholders.

RESPONSIBILITIES

- Serve as the go-to legal advisor on partner data sharing: what customer, account, and application data can be shared through integrations and offline feeds, and on what legal basis, and document that guidance for the Data and business teams.

- Advise on privacy opt-outs and suppression obligations, including processing partner privacy files and honoring opt-outs across data sets and downstream third parties; maintain business-facing data-sharing and opt-out guides.

- Provide practical FCRA guidance, including permissible purpose, use and reuse of credit reports, and the sharing of application and credit-decision outcomes.

- Advise on GLBA / Regulation P and consumer privacy notices, and draft, review, and maintain privacy notices and cardholder information-sharing notices.

- Interpret state privacy laws (CCPA/CPRA and emerging state regimes) and automated-decision-making / AI requirements, and advise on their impact on data use, credit scoring, and product design.

- Own data retention and deletion guidance: mapping regulatory retention obligations and destruction requirements and supporting the record-retention policy.

- Partner with Security and GRC on partner and vendor information-security risk assessments, testing constraints, and incident response (including forensics, chain of custody, and breach/authority notification).

- Provide product counseling to Product and Engineering on new features and builds that affect data sharing, privacy, or the customer experience, and draft the consents and data-related terms they need.

- Coordinate with Compliance on regulatory interpretation, monitoring, and exam preparation, and support the Associate General Counsel on escalated complaints, regulatory inquiries, and bank-partner matters.

- Translate complex data, privacy, and security requirements into clear, actionable guidance for cross-functional partners.

QUALIFICATIONS

REQUIRED

- J.D. from an accredited law school and active membership in good standing with at least one U.S. state bar.

- 4 to 8 years in data privacy law, with demonstrated expertise in GLBA/Regulation P, FCRA, and state privacy laws including CCPA, and consumer financial regulation.

- Experience in financial services, fintech, or a high-growth startup environment.

- Working knowledge of FCRA and GLBA / Regulation P, and familiarity with state privacy laws (CCPA/CPRA and newer state regimes) and their practical application to data sharing and product.

- Experience advising on data-sharing arrangements, privacy notices and opt-outs, and data retention.

- Strong contract review skills, including data sharing agreements, DPAs, and regulatory-facing documentation.

- Comfort partnering with security and information-security teams on vendor risk assessments, data protection, and incident response.

- Demonstrated ability to work autonomously, own work end-to-end, manage competing priorities, and deliver clear legal guidance under tight timelines.

- Strong communicator who proactively updates stakeholders and builds relationships across teams, able to explain a legal risk to an engineer, a data question to an analyst, and a regulatory nuance to a business leader with equal clarity.

- Willingness to research independently and verify findings with senior team members.

NICE TO HAVE

- Privacy certification (e.g., CIPP/US).

- Experience with FCRA in a lending or credit context, ECOA/Reg B adverse action, and automated decision-making / AI governance (e.g., state ADMT laws).

- Familiarity with data-security frameworks (PCI DSS, SOC 2, NIST) and breach/incident-response processes.

- Familiarity with additional consumer finance regulations (TILA/Reg Z, EFTA/Reg E, UDAAP, CAN-SPAM, TCPA) and their intersection with data and product.

- Experience in sponsor bank, banking-as-a-service, or fintech partnership environments.

- Experience with GDPR applicability and ROPA obligations.

- Experience working in a ticketing or project management system (e.g., Linear, Jira, Asana).

- Comfort with legal technology, AI-assisted workflows, and process automation.

- Experience with consumer credit products, such as credit cards or buy-now-pay-later.

- Experience building or standardizing privacy frameworks across multiple product lines or partner programs.

PERKS & BENEFITS

- Competitive compensation and equity packages

- Leading configured work computers of your choice

- Flexible paid time off

- Fully covered, high-quality healthcare, including fully covered dependent coverage

- Additional health coverage includes access to One Medical and the option to enroll in an FSA

- 20 weeks of paid parental leave for the primary caregiver and 8 weeks for all new parents

- Access to industry-leading technology across all of our business units, stemming from our philosophy that we should invest in resources for our team that foster innovation, optimization, and productivity

Imprint is committed to a diverse and inclusive workplace. Imprint is an equal opportunity employer and does not discriminate on the basis of race, national origin, gender, gender identity, sexual orientation, protected veteran status, disability, age, or other legally protected status. Imprint welcomes talented individuals from all backgrounds who want to build the future of payments and rewards. If you are passionate about FinTech and eager to grow, let’s move the world forward, together.

From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against Imprint's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.

  3. We apply on Imprint's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.

  4. Every reply, sorted

    Imprint's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.

  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

Get the CV for this job
By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.