Senior Regulatory Compliance Attorney

About the role

CB&I, which delivers storage and asset-management solutions, is hiring a Senior Regulatory Compliance Attorney in its legal group, based in The Woodlands, Texas. The role supports and helps implement the company's risk-based compliance framework, manages regulatory matters and examinations, protects data and privacy, and mitigates regulatory and compliance risks across the global organization. It is an individual contributor position reporting to the Director of Legal and Corporate Compliance Officer, with four days a week in the office.

Key responsibilities

• Support, maintain and enhance the enterprise compliance program across multiple jurisdictions, draft policies, procedures, controls and guidance, and collaborate on trade compliance, export controls, cross-border requirements and third-party due diligence
• Conduct risk assessments, develop mitigation strategies, manage correction actions and track compliance and remediation efforts
• Support supply chain, trade and export compliance
• Support and conduct confidential internal investigations, draft investigation reports, and help manage the employee whistleblower hotline and metric reporting
• Assist with regulator, inspector and supervisory communications, coordinate responses to regulatory exams, audits, inquiries, remediation plans, incidents and breaches, and provide guidance on aligning operational controls with regulatory requirements
• Support privacy and GDPR initiatives, including designing and improving the privacy framework, drafting GDPR-compliant notices and policies, running periodic privacy monitoring and audits, and supporting data protection impact assessments, risk assessments and incident responses

Required profile

• J.D., LL.M. or LL.B.
• Licensed attorney in good standing in Texas, or licensed in another U.S. state able to qualify as non-Texas licensed in-house counsel working in Texas
• 5+ years of legal and compliance experience supporting corporate compliance programs, preferably multi-jurisdictional, with enough expertise to lead compliance projects with limited supervision
• 2+ years of data governance, data protection and/or privacy experience
• 2+ years defending against regulatory inquiries, investigations and enforcement proceedings and interacting with regulators
• Fluent in English

Preferred qualifications

• Experience with global companies, internal investigations, GDPR compliance, and familiarity with ISO 27001, 27701 and NIST Privacy Framework
• CIPP, CCEP or CRCM certification