Staff Attorney

JOB DESCRIPTION

Why Privacy at GM Financial?

With this role, GM Financial offers a unique opportunity to practice at the intersection of privacy, cybersecurity, and highly regulated financial services and insurance. This role supports GM Financial and General Motors Insurance by helping maintain and improve the company's privacy program, including incident response support, policy and procedure governance, and counseling on privacy requirements in connection with business processes, vendors, and projects. You'll work closely with cross‑functional partners (Cybersecurity, Compliance, IT, Procurement, and business teams) to identify and manage privacy risk in a practical, business‑forward way. It's a great opportunity for someone who wants practical privacy work, strong cross‑functional exposure, and real ownership with senior counsel support.

At GM Financial, our team members define and shape our culture - an environment that welcomes new ideas, fosters integrity, and creates a sense of community and belonging. Here we do more than work - we thrive.

Our Purpose: We pioneer the innovations that move and connect people to what matters.

RESPONSIBILITIES

About the role

The Staff Attorney assists in providing legal work in support of the Privacy function and guidance regarding legal matters of the corporation to ensure maximum protection of its legal rights and to maintain its operations within state and federal limits.

In this role you will:

• Support corporate compliance with all relevant federal, state and local laws, regulations and ordinances
• Assist senior attorneys in the management of outside counsel hired to obtain legal opinions
• Assist in research, review, analysis, drafting and approval of various documents, policies, procedures and obligations to which the company is or may become a party.
• Maintain up-to-date knowledge of privacy and cybersecurity law and events relevant to the company
• Support the development, implementation, and maintenance of the company's privacy program, including practices designed to protect personal information and other applicable company data
• Maintain up-to-date knowledge of the law in areas of special interest to the company
• Support regulatory change management for privacy and cybersecurity requirements
• Collaborate with cross-functional teams at all levels of the organization (Cybersecurity, Compliance, IT, Procurement, and business stakeholders) on privacy matters, including to embed privacy requirements into new and existing processes, projects, and systems
• Assist in managing customer privacy notice revisions and processes
• Provide support for implementation of new privacy laws and requirements

• Foundational knowledge or familiarity with privacy and cybersecurity concepts, common standards, and general regulatory frameworks applicable to a regulated financial services environment
• Familiarity with US privacy laws relevant to consumer finance related privacy laws, insurance and with the ability to learn and apply new requirements quickly with supervision
• General understanding (or willingness to learn) basic information technology concepts and how systems, data flows, and security controls can impact privacy compliance.
• Knowledge of the principles, methods, materials and practices of legal research
• Basic familiarity of auto finance and property and casualty insurance concepts
• Understanding of various legal research software and word processing software packages (e.g., Lexis, Microsoft Word, Excel, Adobe Acrobat)
• Ability to manage heavy workload in a high-pressure environment
• Analytical ability to define problems, collect data, establish facts and draw valid conclusions
• Excellent organization skills
• Effective communication skills including oral, written and presentation
• Ability to deal effectively and tactfully with corporate personnel, customers and contractors
• Must be able to work independently and able to use computerized research tools
• Ability to read, analyze and interpret complex legal documents

• Juris Doctor (J.D.) from an accredited law school, or in progress with an expected graduation date of Spring 2026
• Admitted to practice law in a minimum of one state or ability to obtain within the first year of employment
• 0-2 years of legal experience in a corporation or law firm preferred