Senior Regulatory Compliance Counsel

Worldwide, energy asset owners choose CB&I Asset Solutions as their asset management partner, confident in our ability to deliver tailored, value driven asset management solutions. Commitment is simple but powerful: to deliver value to our customers through safe, effective and efficient operations, maintenance, wells and decommissioning solutions, specialising in late life energy assets. We're committed to investing in our people, and to building exceptional teams who deliver. Our people are trusted by our customers to safely operate their energy assets, improve performance and extend asset life through innovative solutions. We support flexible working requests and have adopted a hybrid approach for most of our office-based roles. We ask employees to be present in the office at least three days per week. Think smarter. Move faster. Deliver value. Overview CB&I delivers integrated storage and asset‑management solutions that help customers operate safely, reliably, and efficiently across the lifecycle of their facilities. Through our two global business units – Storage Solutions (the world leader in tanks, terminals, and storage systems) and Asset Solutions (a leading provider of operations, management, wells and decommissioning services) – we combine technical excellence with execution capability to extend asset life, optimize performance, and maximize value. The Principal Regulatory Compliance Attorney is a critical position responsible for designing and implementing a comprehensive risk-based compliance framework; managing regulatory strategy and examinations; protecting data and privacy; and mitigating regulatory and compliance risk across our global organization. The Principal Regulatory Compliance Attorney is an Individual Contributor role within CB&I's dynamic legal group located across the USA, UK, and the UAE. This role is required to be in the office, will directly report to the Legal Director of Legal, Litigation, Ethics, and Compliance in The Woodlands, Texas, USA, and will also report to the Legal Director for CB&I Asset Solutions in Aberdeen, Scotland. Remit & Responsibilities Enterprise Compliance

• Help design, implement, and improve CB&I's enterprise compliance program across multiple jurisdictions. This includes various responsibilities, such as:
• Create policies, procedures, and controls to confirm alignment with applicable laws, regulations, and industry standards;
• Provide oversight and collaboration on compliance matters intersecting with export controls, trade compliance, cross-border regulatory requirements, and third-party due diligence; and
• Conduct risk assessments, identify root causes, develop mitigation strategies, implement and manage correction actions; and track compliance and remediation efforts
• Support and help lead supply chain and trade and export compliance Internal Investigations
• Support and conduct confidential internal investigations. Draft investigation reports. Help manage the employee whistleblower hotline and metric reporting. Regulatory
• Serve as a primary contact for regulator, inspector, or supervisory communications. Help coordinate or lead productions, submissions, and responses to regulatory exams, audits, inquiries, remediation plans, incidents, or breaches.
• Take responsibility for statutory updates and submissions (e.g., registration and payment of annual data protection fees to the ICO and quarterly returns to the Scottish Lobbying Register).
• Ensure alignment between regulatory requirements and internal policies and programs. Provide guidance on aligning operational controls and initiatives with regulatory requirements. Data Privacy
• Serve as the GDPR subject-matter expert and help design, implement, and improve the company's privacy framework and data protection program, ensuring alignment with GDPR principles, accountability requirements, and supervisory authority expectations.
• Draft and maintain GDPR-compliant privacy notices, polices, and procedures and conduct or assist with conducting periodic privacy monitoring and audits.
• Advise and potentially lead data protection impact assessments, privacy risk assessments, and privacy-related incident response, including breach assessments, notification obligations, and coordination with regulators and external counsel, as needed. Essential Qualifications and Skills Key Competencies
• Strong functional knowledge and proven experience building and maintaining compliance frameworks and handling regulatory matters for a global or multijurisdictional organization or across multiple jurisdictions and borders
• Functional knowledge and proven experience designing and maintaining EU/UK and GDPR compliance
• Subject matter expertise on U.S., EU, and GDPR regulatory, compliance, privacy, and data protection regulations
• Practical approach to regulatory compliance in operational environments
• Ability to work autonomously and proactively without frequent supervision
• Strategic thinker with strong analytical and problem-solving skills
• Business presence, polish, and credibility with regulators, leadership, and colleagues
• High emotional intelligence and interpersonal skills
• Strong written and verbal communication and presentation skills
• Fluent in English (speaking and writing). Experience & Qualifications
• Education: J.D., LL.M., or LL.B.
• License : Licensed Solicitor in good standing in the U.K. or equivalent
• Experience of building and overseeing compliance programs and frameworks (preferably multi-jurisdictional experience) with experience in the EU and UK.
• Experience of EU and UK regulatory compliance, including GDPR and EU data governance, data protection, and privacy
• Experience of defending against EU, UK, and other regulatory inquiries, investigations, and enforcement and interacting with regulators and supervisory authorities.
• Certified Information Privacy Professional (CIPP), Certified Compliance and Ethics Professional (CCEP), or Certified Regulatory Compliance Manager (CRCM) (Preferred)
• Demonstrated experience supporting global companies with EU and GDPR compliance needs and handling complex regulatory compliance matters across multiple jurisdictions (Preferred)
• Familiarity with ISO 27001, 27701, and NIST Privacy Framework (Preferred)