Global Privacy Counsel
Responsibilities: Implement, communicate and monitor privacy compliance processes across the business, including
- Respond as the first point of contact to technical and procedural questions relating to privacy,
- Support and lead RFP/RFI process related to privacy,
- Provide subject matter expertise regarding data privacy and data security provisions within commercial deals, including providing guidelines for data processing agreements with customers and vendors
- Review DPIAs for new product offerings and systems,
- Lead the response to data subject rights requests,
- Maintain corporate records of data processing activities, data privacy notices, templates and policies,
- Support the Incident Response Team in the review, coordination and management of potential privacy or data security incidents,
- Oversee the public facing privacy mailbox, and
- Lead special compliance projects.
- Partner with the legal team on privacy-related diligence for potential investments or acquisitions.
- Maintain current and up-to-date knowledge of applicable state, federal and international privacy/data security laws, regulations and accreditation standards, and monitor changes and advancements in information privacy and data security technologies to ensure organizational adaptation and compliance.
- Travel required
- 2+ years relevant experience in a privacy-focused role in a global technology company. Familiarity with GDPR and CCPA is ideal.
- CIPP/E or other relevant certifications from the International Association of Privacy Professionals or similar certification a plus.
- Candidates should have strong experience in operationalizing data privacy and must have experience in conducting and documenting privacy impact assessments and data subject access requests, including identifying how personal data is processed, appropriate privacy requirements and any associated privacy risks.
- J.D. or equivalent international legal qualification; will consider non-attorney candidates who have substantial relevant experience in implementing and managing a global privacy compliance program.
- Proven ability to work in a highly matrixed organization in a fast-changing environment; self-motivated and organized.
- Proven ability to communicate clearly about complex data privacy and data protection issues with both legal and non-legal stakeholders.
- Fluent written and verbal English language skills required; fluency or knowledge of other EU languages a plus, especially German and French.