Senior Privacy & Security Counsel

Marqeta is on a mission to change the way money moves. Our open API card issuing platform provides unprecedented flexibility and control for industry-leading companies such as Square, Coinbase, J.P.Morgan, and Uber, to issue cards, authorize transactions, and manage payment operations in real time. Founded in 2010, Marqeta IPO’d in 2021 and has grown into a team of over 900 Marqetans in the US, UK, Singapore, and Australia. 

Marqeta Inc. is seeking a Senior Privacy & Security Counsel who will help drive Marqeta’s privacy and security legal strategy. As the Senior Counsel, you will provide privacy and security legal and business advice on important matters impacting Marqeta. You will build strong relationships across Marqeta’s Legal, Risk and Compliance Team, as well as with key stakeholders including Product, Tech, and Revenue. You have a team approach and are proud to deliver work of impeccable quality within tight deadlines. You are also innovative with a sense of drive and adventure. You will report to the Vice President and Deputy General Counsel, Head of Privacy & Security.

We work Flexible First. This role can be performed remote within the United States or from our Oakland, CA office. We’d love for you to join us!

What You’ll Do

• Help drive legal strategy to manage all data privacy and security matters impacting the company’s business
• Partner closely with Compliance, Product, Tech, Revenue, Security Engineering, and other cross-functional teams to help develop scalable solutions that enable product innovation and international expansion, while protecting personal and financial data records
• Provide legal guidance and collaborate with internal teams to assess and implement a privacy and security governance program, including providing requirements for new data uses, new market entry, cross-border data transfers, data subject rights, vendor compliance, and incident preparedness and response
• Partner with Commercial Counsel to provide privacy and security subject-matter support for commercial and vendor agreements, including drafting and negotiating privacy and security-related contract terms
• Monitor, track and assess the rapidly evolving landscape of privacy and cybersecurity laws and regulation, as well as industry approaches to privacy and security program management 
• Support Company-wide privacy and security training program 
• Instruct and manage outside counsel, as necessary

What We’re Looking For

• JD and member in good standing of a state bar 
• Substantive privacy and data security experience 
• Expert and detailed knowledge of global privacy and data protection laws and regulations (such as CCPA, GDPR, LGPD, PIPEDA), as well as knowledge of privacy laws and requirements applicable to financial data (e.g. GLBA)
• Substantial knowledge of information security laws, industry standards and best practices, including NIST Cybersecurity Framework, PCI-DSS, and FFIEC guidelines
• Experience negotiating, drafting, and updating privacy and security-related contract terms, policies, and other documentation

Nice-To-Haves

• Understanding of security infrastructure and the payments industry is helpful
• Familiarity with intellectual property law is helpful, but not required

Typical Process

• Application submission
• Recruiter phone call
• Hiring manager video call
• Virtual “Onsite” consisting of 4-5 45 min calls
• Offer!

Compensation and Benefits

• Flexible time off – take what you need
• Retirement savings program with company contribution
• Equity in a publicly-traded company and an Employee Stock Purchase Program
• Health insurance premiums paid 100% + coverage for dependents and pets
• Family-forming benefits, fertility support, and up to 20 weeks of Parental Leave
• Free therapy sessions, financial coaching, and legal advice
• Monthly stipend to support our hybrid work model 

Sponsorship

• We do not currently support any new sponsorship opportunities or sponsorship transfers for this role

Our Applicant and Candidate Privacy Notice applies to the personal data that you directly provide to us or that we collect during the application and candidate recruitment process.