Director, Legal - Global Privacy & Data Counsel

Lead the Privacy Team: Lead a team of professionals spanning legal, operations and compliance, and data governance. Provide strong leadership to build a well-functioning team.

Privacy Program Development: Design, implement, and evolve a robust and forward-thinking privacy program tailored to the specific needs of SIE's multi-faceted, data-driven business. Provide senior leadership in communicating the company's vision, strategy, and objectives for data privacy and data husbandry to stakeholders across SIE.

Regulatory Compliance: Stay up to date with evolving global privacy laws and regulations, including GDPR, CCPA, and other regional data protection requirements. Ensure the company's policies and practices remain compliant with the changing legal landscape.

Privacy by Design: Advocate privacy-by-design principles and ensure that privacy considerations are integrated into the development of new products, services, and technologies, working closely with product counselors, product managers, business function leaders and SIE's ESG team.

Privacy Policies and Procedures: Create and review privacy policies, notices, consent forms, and related documentation to ensure transparency and compliance with relevant data protection laws. Collaborate with Legal, Compliance, and other teams to disseminate these policies throughout the organization and to customers.

Employee Training and Awareness: Conduct privacy training programs for employees and management to promote a privacy-aware culture. Foster awareness of privacy responsibilities and best practices throughout the organization.

Vendor Management: Develop and evolve SIE's processes to assess the privacy practices of vendors and third-party partners to ensure that data processing agreements and contracts comply with privacy and SIE's Information Security requirements.

Privacy Impact Assessments: Oversee the conduct of privacy impact assessments (PIAs) to identify and mitigate privacy risks associated with the company's data processing activities.

Incident Response: Develop and maintain an effective incident response plan for privacy breaches. Coordinate with the Incident Response team to manage and mitigate privacy incidents and associated risks.

Reporting and Accountability: Provide regular reports on the status of the privacy program to executive leadership and the board of directors. Be a focal point of contact for privacy-related inquiries from regulators and customers.

Qualifications: Juris doctor degree; bachelor or advanced degree in computer science, information technology, or a related field. An advanced degree is a plus. 20+ years of legal experience and 10+ years proven experience in a senior privacy leadership role, preferably as a Chief Privacy Officer or Privacy Officer, within a data-driven technology company or relevant industry. In-depth knowledge of global privacy laws and regulations, such as GDPR, CCPA, and other regional frameworks. Broad knowledge of emerging requirements in the APAC region is a strong plus. Demonstrated ability to design and implement comprehensive privacy programs that align with industry best practices, laws and regulations and data use requirements typical of a company like SIE. Experience in building an incident response process in partnership with the CISO or similar function; experience managing privacy incidents. Experience conducting privacy impact assessments and building processes for such assessments that will easily scale. Excellent communication and interpersonal skills, with the ability to interact effectively with stakeholders at all levels of the organization. Strong leadership qualities, with the ability to influence and drive change in a collaborative environment. Privacy-related certifications such as CIPP, CIPM, CIPT, or other relevant certifications are highly desirable.