Senior Director, Privacy Counsel

Title: Senior Director, Privacy Counsel

Location: (Flexible / Can be fully remote)                             

Reports to: General Counsel

Job Purpose: Manage the global privacy program and serve as the lead privacy counsel

LTK is looking for an exceptional, experienced privacy attorney ideally with experience in the digital marketing (adtech) and / or eCommerce industries. You will have the opportunity to further refine, implement and manage LTK’s compliance efforts relating to GDPR, CCPA, and related laws, and will provide effective legal advice to the leadership team on company strategies and their implementation and help prepare the company for its next stage of growth. The successful candidate will provide sound, clear, and succinct recommendations and analysis to senior stakeholders and business teams, including the C-suite and audit committee, to enable the company to make sound and practical risk based decisions.   

Key Role

Responsible for building and assessing LTK’s privacy roadmap, aligning with LTK stakeholders including the C-suite on key efforts and risk assessments, and managing the data privacy program, including incident response, privacy impact assessments, DPAs, and DSARs. Work with counsel to maintain standards and controls to comply with state, national and international data privacy regulations and laws. Advise LTK stakeholders on risks in new initiatives, products, and programs, and propose mitigation strategies to address those concerns or risks. Support training and communications planning, including data privacy day events and the development and implementation of training courses related to data privacy. Establish metrics, tracking, documentation, and program management of data privacy compliance programs. Coordinate and enable data privacy compliance monitoring activities, including reporting and analytics. Work with cross-functional business teams, including Security, Legal, Product, Engineering, People Team (HR), and Finance to address potential risks and achieve data privacy program objectives, and provide as-needed support to leaders and stakeholders across the company.  

Key responsibilities

• Compliance & Data Privacy Controls - Refine, operationalize, and manage scalable and enforceable risk-based controls to ensure data privacy risk is appropriately scoped and mitigated in alignment with company objectives. 
• Compliance & Data Privacy Assurance - Refine and further develop processes to actively monitor the effectiveness of all established data privacy controls.
• Compliance & Data Privacy Communications - Provide privacy compliance communications to stakeholders including C-suite, board of directors, and products and engineering leadership.
• Compliance & Data Privacy Education - Improve Privacy and Awareness training to meet objectives based on in-depth knowledge of global and local privacy laws and regulations.
• Compliance & Data Privacy Strategy - Work with stakeholders to develop data privacy strategy and roadmap 

Minimum Requirements:

• BA or BS degree; JD and bar admission
• 6+ years of relevant leadership experience within data privacy program 
• 10+ years of professional experience (program implementation / design / leadership preferred)
• In-depth understanding of data protection law and practices and concepts, including familiarity with key principles, legislation (GDPR, e-Privacy, Data Breach and CCPA), common risk frameworks, and international data flow concepts 

Preferred Qualifications:

• Previous experience developing and driving privacy strategy and privacy roadmap
• Professional Privacy certification, such as CIPP/E, CIPP/US
• Deep experience with adtech and interest-based advertising and / or eCommerce including use of cookies and similar technologies in the EU and US, preferably in a consumer facing environment
• Familiar with cloud platform environment

Best Qualified Candidates will have:

• Ability to proactively and independently track, organize, and coordinate global projects to achieve results and an ability to communicate results effectively to senior stakeholders
• Experience with drafting privacy artifacts including risk assessments, privacy impact assessments, data inventory mapping, and associated workflows
• Knowledge of incident response processes, procedures, and requirements
• Experience with developing risk management strategies related to privacy risk arising from data processing activities
• Ability to understand and work with new and emerging technologies
• Ability to collaborate effectively with stakeholders across the company, including business-focused teams, security, legal, and finance / accounting teams
• Demonstrated ability to clearly and concisely articulate issues, draft procedures and guidelines, design and track metrics, prepare and lead presentations on privacy topics
• Experience in influencing adjacent resources to achieve objectives in furtherance of the privacy program
• Passion for problem solving in collaboration with partners, with the desire to take ownership of issues and follow through until resolution
• Ability to creatively promote a pro-privacy culture and lead by example.
• Ability to work independently and know when to seek guidance or elevate.
• Eagerness and ability to dive into technical details to understand data privacy implications and requirements.
• Must be able to work in a complex organizational environment and support a global program.
• Possession of excellent analytical skills, including attention to detail
• Possession of excellent interpersonal skills, including developing collegial relationships with colleagues at all levels
• Possession of excellent oral and written communication skills
• Team player who fosters professionalism, integrity, and confidentiality in all actions
• Ability to help the team on a wide variety of tasks, as needed
• Ability to achieve against deadlines and prioritize / be flexible where warranted