Principal Counsel and Associate Director, Data Privacy and Protection

Company FINRA. Location Jersey City, NJ, United States

Public Interest


Min 6 yrs required



Oct 13, 2022

Jun 30, 2022


Principal Counsel and Associate Director, Data Privacy and Protection
The candidate will be responsible for interpreting, advising on, monitoring, and managing various privacy programs and activities at the organization, at all times acting in an independent and confidential manner. Responsible for privacy, legal, and programmatic privacy work. Independently counsels senior leaders across the organization regarding complex privacy matters, data loss events, and privacy policy violations raised to the Data Privacy & Protection (DPP) Office. Proactively identifies areas for improvement in the organization's privacy policies and programs based on changing state, federal, and global legal requirements; develops recommendations based on desired outcomes; engages security and business stakeholders, senior leaders, and end-users across the enterprise, as appropriate to identify potential impacts; and implements necessary improvements. Identifies opportunities to improve the organization's privacy programs by researching industry best practice program improvements and developing timelines, project plans, and resources necessary to implement improvements. Briefs DPP management on recommendations and independently leads activities relating to the improvements. Independently conducts comprehensive investigations of potential violations of the organization's privacy policies, including interviewing relevant players, drafting summaries for case files, and working with relevant control departments to determine outcomes. Be the primary attorney responsible for reviewing and negotiating privacy provisions in vendor contracts, as requested by the Office of General Counsel Transactions attorneys. Provides expert interpretive guidance to the Office of Governmental Affairs and all in-house departments regarding proposed federal and state legislation and potential impacts on the organization's operations. Where legislation prompts required or discretionary changes to the organization's privacy practices, identifies and presents original, creative, innovative, and sophisticated solutions for changes to the existing policies and program. Responsible for policy updates and the creation of guidance materials. Serves as the primary attorney responsible for the organization's internally and externally facing privacy policies, including relevant application or system privacy policies. Provides direction to the other DPP team members, Cyber and Information Security team members, and Information Managers on all activities associated with the privacy policy requirements, including coaching DPP staff on privacy policy requirements, determining appropriate responses to employee questions, reviewing annually the Information Privacy and Protection Policy and supplemental guidance documents for accuracy, involvement in enterprise-wide training and communication efforts, and related responsibilities as directed by the DPP Senior Director and Counsel. Builds strategic relationships across the organization to gain familiarity with the parameters and nature of each Department's specific restricted information programs and privacy controls. Provides tailored expert advice to those department leaders and exercises independent judgment in evaluating requests for the privacy policy or program changes. Engages in other Privacy Office-related activities as needed.

Qualification and Experience

The candidate should have a Law degree and admission to the Bar. Should have CIPP/US or CIPM or the willingness to obtain a certification. Must have 6+ years of experience in a legal role in privacy, compliance, investigations, or policy development and implementation, preferably in a regulatory environment. Corporate privacy program experience is desirable. Experience in a non-profit or government environment is highly desirable. Project management experience would be an asset. Strong legal research skills are required. Experience with Microsoft Access or other database software, as well as Microsoft PowerPoint and Adobe Acrobat, is a plus. Work outside normal business hours is sometimes required. Occasional travel may be needed.

Additional info

Job Requisition ID: R-004693

Company info

Hiring Coordinator
Jersey City, NJ 07311

Apply for this Attorney job
Upload Resume:

Apply Later

The #1 legal job board in the United States year after year after year!