Senior Director, Legal - Global Privacy & Data Counsel

Why Sony Interactive Entertainment?

Sony Interactive Entertainment isn't just the Best Place to Play - it's also the Best Place to Work. Sony Interactive Entertainment (SIE) is the company behind the PlayStation brand. As a subsidiary of Sony Group Corporation, we're part of a proud legacy of innovation and excellence. SIE is a dynamic technology company, delivering cutting-edge hardware and network services to more than 100 million people and an entertainment leader, home to some of the most beloved and recognizable intellectual properties (IP) in the world. Our role at SIE is to create and nurture the experiences under the PlayStation brand, a name synonymous with entertainment excellence and creativity.

Senior Director, Legal - Global Privacy & Data Counsel

San Mateo, CA or London, England | Hybrid - 2+ days per week in your designated office Full relocation assistance available for qualified candidates

Role Summary:

Leading SIE's Global Legal Privacy program, you will play a pivotal role in shaping and advancing this function, which is central to our mission as a data-driven technology and entertainment company. You will develop, implement, and maintain comprehensive privacy policies, procedures, and practices that reflect industry best practices, comply with applicable data protection laws and regulations, and support SIE's business objectives. Working collaboratively with teams around the world, you will help embed strong data privacy stewardship across the organization through your leadership, passion, and expertise.

What You'll Be Doing:

• Lead the Privacy Team: Lead a team of professionals spanning legal, operations and compliance, and data governance. Provide strong leadership to build a well-functioning team.
• Privacy Program Development: Design, implement, and evolve a robust and forward-thinking privacy program tailored to the specific needs of SIE's multi-faceted, data-driven business. Provide senior leadership in communicating company's vision, strategy, and objectives for data privacy and data husbandry to stakeholders across SIE.
• Regulatory Compliance: Stay up to date with evolving global privacy laws and regulations, including GDPR, CCPA, and other regional data protection requirements. Ensure the company's policies and practices remain compliant with the changing legal landscape.
• Privacy by Design: Advocate privacy-by-design principles and ensure that privacy considerations are integrated into the development of new products, services, and technologies, working closely with product counselors, product managers, business function leaders and SIE's ESG team.
• Privacy Policies and Procedures: Create and review privacy policies, notices, consent forms, and related documentation to ensure transparency and compliance with relevant data protection laws. Collaborate with Legal, Compliance, and other teams to disseminate these policies throughout the organization and to customers.
• Employee Training and Awareness: Conduct privacy training programs for employees and management to promote a privacy-aware culture. Foster awareness of privacy responsibilities and best practices throughout the organization.
• Vendor Management: Develop and evolve SIE's processes to assess the privacy practices of vendors and third-party partners to ensure that data processing agreements and contracts comply with privacy and SIE's Information Security requirements.
• Privacy Impact Assessments: Oversee the conduct of privacy impact assessments (PIAs) to identify and mitigate privacy risks associated with the company's data processing activities.
• Incident Response: Develop and maintain an effective incident response plan for privacy breaches. Coordinate with the Incident Response team to manage and mitigate privacy incidents and associated risks.
• Reporting and Accountability: Provide regular reports on the status of the privacy program to executive leadership and the board of directors. Be a focal point of contact for privacy-related inquiries from regulators and customers.

What We're Looking For:

• Juris doctor degree; bachelor or advanced degree in computer science, information technology, or a related field. An advanced degree is a plus.
• 20+ years of legal experience and 10+ years proven experience in a senior privacy leadership role, preferably as a Chief Privacy Officer or Privacy Officer, within a data-driven technology company or relevant industry.
• In-depth knowledge of global privacy laws and regulations, such as GDPR, CCPA, and other regional frameworks. Broad knowledge of emerging requires in the APAC region a strong plus.
• Demonstrated ability to design and implement comprehensive privacy programs that align with industry best practices, laws and regulations and data use requirements typical of a company like SIE.
• Experience in building an incident response process with partnership with the CISO or similar function; experience managing privacy incidents.

#J-18808-Ljbffr