Mastercard
Senior Counsel, Privacy - Blockchain & Digital Assets

How your CV stacks up
Upload your CV to see how well it fits this job role
?%
Our Purpose
Mastercard powers economies and empowers people in 200+ countries and territories worldwide. Together with our customers, we’re helping build a sustainable economy where everyone can prosper. We support a wide range of digital payments choices, making transactions secure, simple, smart and accessible. Our technology and innovation, partnerships and networks combine to deliver a unique set of products and services that help people, businesses and governments realize their greatest potential.
Title and Summary
Senior Counsel, Privacy - Blockchain & Digital Assets
Who is Mastercard?
Mastercard is a global technology company in the payments industry. Our mission is to connect and power an inclusive, digital economy that benefits everyone, everywhere by making transactions safe, simple, smart, and accessible. Using secure data and networks, partnerships and passion, our innovations and solutions help individuals, financial institutions, governments, and businesses realize their greatest potential.
Our decency quotient, or DQ, drives our culture and everything we do inside and outside of our company. With connections across more than 210 countries and territories, we are building a sustainable world that unlocks priceless possibilities for all.
Overview
Mastercard is looking for an experienced privacy lawyer to support its evolving digital assets ecosystem from a privacy and data protection standpoint, including the integration and ongoing operation of BVNK and initiatives involving digital assets, blockchain, crypto payments, stablecoins, fraud, cross-border payments, embedded finance, and other emerging payment solutions. This role will partner closely with teams across Mastercard and BVNK, including Product, Compliance, Regulatory, Security, and Legal stakeholders, to help enable compliant product development, integration readiness, and ongoing business support.
The ideal candidate will have the ability to think and act both strategically and tactically with respect to the needs of tech-focused business clients and their objectives while ensuring that the corporation remains compliant with privacy, cyber, and data-related laws and regulations. The candidate should be practical, intellectually curious, and comfortable providing hands-on privacy advice in a rapidly evolving technology and regulatory environment.
The position will report to the Senior Managing Counsel and will be a member of the Law Department, supporting the Blockchain & Digital Assets team under Mastercard’s Core Payments business.
Reasons to use Rodeo
I’m in my final year doing Economics and I don’t know whether to apply for grad schemes now or do a masters first. What do you think?
Honest answer — it depends on where you want to end up. A lot of top grad schemes (Big 4, civil service, banking) don’t need a masters. Let’s look at the ones you’d be competitive for now, and we can decide if a masters actually adds anything.
Also worth knowing: most autumn 2026 applications are open now. Timing matters more than you think.
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
Graduate Consultant — 2026 Scheme
Why you're a good match
StrongYour economics background and your summer at a regional bank line up with what PwC looks for on the consulting scheme. Applications close in four weeks.
See breakdownIt searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Why you're a good match
You’ve got the grades and the economics background, and your bank internship is exactly the experience this scheme looks for. Apply soon — deadlines close within the month.
Experience fit
Your summer at the bank plus your econometrics coursework map directly to the day-one responsibilities on this scheme — client modelling, market briefings, and deal support.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
Role
- Analyze payment, digital asset, blockchain, stablecoin, fraud, and related technology solutions in light of privacy and data protection requirements with the aim of identifying the relevant process and infrastructure requirements to ensure compliance with applicable privacy and data protection laws globally, including GDPR, UK GDPR, and related European privacy and data protection requirements.
- Provide day-to-day support to business teams supporting digital assets, crypto payments, stablecoins, fraud, cross-border payments, and other emerging payment initiatives, and perform privacy and data protection law assessments in line with Mastercard’s privacy and data protection policies and processes.
- Support the integration and ongoing operation of BVNK and related acquired or strategic businesses, including by helping identify and address privacy compliance needs, control requirements, and remediation activities.
- Support the development and implementation of GDPR and UK GDPR compliance measures, including privacy impact assessments, privacy by design, international data transfer requirements, and legally required recordkeeping.
- Increase awareness among business clients, global privacy and legal teams regarding privacy and cyber security pertaining to payment, digital asset, blockchain, stablecoin, fraud, and related technology solutions through training and other initiatives.
- Monitor regulatory and legislative developments pertaining to crypto payments, stablecoins, blockchain technology, cross-border payments, embedded finance, identity verification, GLBA, DOJ bulk data transfer rules, and support the engagement with key policymakers and stakeholders to influence developments in that space.
- Develop contract structures that address privacy and data protection requirements, review and negotiate applicable privacy language in agreements with vendors, customers, partners, and other third parties, including DPAs and contractual data rights with UK/EEA customers and partners.
- Identify opportunities to improve privacy processes, controls, and governance for emerging payment and digital asset products, including to support speed to market while maintaining compliance with Mastercard policies and applicable law.
All About You
- Law degree required. Membership to a Bar (if permitted by law). Any additional qualifications (e.g. Master of Laws degree) considered an asset
- Solid expertise in and track record dealing with privacy law
- Experience advising on privacy or data protection issues involving financial services, fintech, digital asset products, stablecoins or other digital currencies, and the use of public and private blockchains is preferred.
- Experience advising on GDPR, UK GDPR, international data transfers, DPAs, or related UK/EU privacy and data protection requirements is preferred.
- Familiarity with financial services industry and payment processing.
- Ability to gain rapid familiarity with complex products, services, and legal frameworks, and to apply privacy requirements in a practical, business-oriented way.
- Superior time management, planning, and organizational skills
- Strong analytical, writing, and speaking skills. Attention to detail is a must.
- Exceptional interpersonal skills with proven experience in relationship building and partnering. Must work well in both team and individual settings
- Ability to motivate and influence highly skilled professionals to achieve major organizational goals
- Strong business acumen.
- Language: Fluent English.


Get help with your application
Your very own career expert that helps elevate your application to the next level.
Corporate Security Responsibility
All activities involving access to Mastercard assets, information, and networks comes with an inherent risk to the organization and, therefore, it is expected that every person working for, or on behalf of, Mastercard is responsible for information security and must:
- Abide by Mastercard’s security policies and practices;
- Ensure the confidentiality and integrity of the information being accessed;
- Report any suspected information security violation or breach, and
- Complete all periodic mandatory security trainings in accordance with Mastercard’s guidelines.
Corporate Security Responsibility
All activities involving access to Mastercard assets, information, and networks comes with an inherent risk to the organization and, therefore, it is expected that every person working for, or on behalf of, Mastercard is responsible for information security and must:
- Abide by Mastercard’s security policies and practices;
- Ensure the confidentiality and integrity of the information being accessed;
- Report any suspected information security violation or breach, and
- Complete all periodic mandatory security trainings in accordance with Mastercard’s guidelines.
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London
Skills
Location