Director, Legal AI & Data Gov

At eBay, we're more than a global ecommerce leader — we’re changing the way the world shops and sells. Our platform empowers millions of buyers and sellers in more than 190 markets around the world. We’re committed to pushing boundaries and leaving our mark as we reinvent the future of ecommerce for enthusiasts.

Our customers are our compass, authenticity thrives, bold ideas are welcome, and everyone can bring their unique selves to work — every day. We're in this together, sustaining the future of our customers, our company, and our planet.

Join a team of passionate thinkers, innovators, and dreamers — and help us connect people and build communities to create economic opportunity for all.

About The Team And The Role

The Director of AI Governance will join a world-class legal team in leading development, implementation, and continuous evolution of eBay’s enterprise AI governance program! The role will establish and operationalize legal policies, frameworks, and processes to ensure AI tools, capabilities, and systems are built, deployed, and used in a manner consistent with regulatory requirements (including the EU AI Act, U.S. state laws, and emerging global standards) and the company’s risk tolerance.

The Director will serve as a strategic advisor to the business on developing and adopting AI capabilities compliantly. They will also mentor on onboarding new AI-enabled tools and technologies! The role also interpret and translate rapidly evolving AI legal and regulatory developments into practical, scalable advice that enables innovation while managing risk.

The ideal candidate brings deep expertise in data governance, privacy, and AI regulation, with a demonstrated ability to translate sophisticated legal and regulatory requirements into clear, actionable business solutions.

Reporting to the Senior Director, AGC, Privacy Compliance, AI & Data Governance, this role will partner closely with Legal, Product, Engineering, CoreAI, Global Information Security (GIS), Responsible AI (RAI), and Compliance teams to embed AI governance practices and standards across the organization.

What You Will Accomplish

AI Governance Framework Development

• Establish and maintain a comprehensive AI governance framework by developing policies, standards, and risk assessment methodologies that align with regulatory requirements and eBay’s core values.
• Establish AI risk classification methodology and work cross-functionally to maintain an enterprise AI inventory/registry
• Established history of applying AI tools and capabilities and integrating AI into workflows

Regulatory Compliance & Risk Management

• Monitor (in partnership with Government Relations) and interpret global AI regulatory developments, including the EU AI Act, existing and emerging US state AI laws (including Colorado, Texas, and California), and sector-specific requirements
• Conduct legal AI risk assessments and impact analyses for new and existing AI applications
• Develop and implement compliance strategies that address evolving regulatory requirements while enabling innovation
• Advise teams on legal and regulatory implications of AI initiatives and impact of current and emerging laws
• Translate complex privacy consumer protection regulations—including GDPR, ePrivacy, CCPA/CPRA, U.S. state privacy laws, and global marketing regulations—into practical mentorship for advertising use cases such as real-time bidding (RTB), audience matching, measurement, attribution, frequency capping, and cross-context behavioral advertising.

Privacy & Data Governance Integration

• Coordinate AI governance with existing privacy and data frameworks in partnership with the Privacy team to address specific considerations such as automated decision-making, profiling, and data minimization.
• Lead all aspects of data lifecycle management considerations specific to AI/ML systems, including training data governance, model documentation, and data retention
• Experience in drafting, reviewing, and negotiating advertising and data partnership agreements, including Data Processing Addenda (DPAs), privacy exhibits, data use restrictions, audit rights, and security schedules. Established experience in crafting agreements that prevent downstream data leakage, limit secondary use, and clearly delineate controller/processor and “service provider”/“contractor” roles.
• Partner with Privacy team to address AI-specific privacy considerations (e.g., automated decision-making, profiling, data minimization)

Partner Engagement

• Serve as the internal subject matter authority on AI governance, providing mentorship to business units, product teams, and executive leadership
• Participate in dev