Description:
Description:Job overview and responsibilities:
An accomplished attorney to work within the Global Compliance and Ethics function, part of the Legal Department. This position will have responsibilities for developing and guiding United's global privacy program, to include providing legal advice and counsel on all aspects of United's customer and employee data privacy programs. This role will provide leadership and legal expertise on data privacy issues and privacy compliance matters; conduct risk assessments; support privacy program metrics and reporting; provide counsel to business leaders and other members of the Legal Department; and identify and contribute to the resolution of privacy related legal issues with a broad and complex range of risk exposure. This position will join the Privacy team and report to the Senior Managing Counsel and will work collaboratively with other members of the Legal Department and Cybersecurity and Digital Trust team, as well as a wide variety of business partners.
- Identify, create, and implement standard processes around data privacy
- Provide global privacy legal advice and privacy input on business projects and initiatives
- Analyze new and current laws and regulations and advise the business on privacy obligations and carry out privacy compliance operations
- Support regulatory inquiries and enforcement matters as needed
- Work closely with cross-functional teams, including senior management, and collaborate with Cybersecurity and Digital Risk teams and Cybersecurity counsel to provide privacy strategy and guidance
- Conduct and/or support privacy-related investigations, incident response, complaint handling, and privacy-related litigation
- Maintain privacy-related policies and internal and external privacy notices
- Conduct and oversee privacy impact assessments and related assessments
- Support data governance initiatives, including data minimization guidance
- Draft, negotiate, and advise the business on the privacy aspects of contracts, including cross-border data transfer mechanisms
- Manage and advise outside counsel with respect to privacy matters
- Utilize and help design the company's privacy technology platform
- Identify, develop, and deliver privacy training through various mechanisms to relevant employee groups
This role is Hybrid out of Chicago.
Qualifications:
What's needed to succeed (Minimum Qualifications):
- Juris Doctor degree; membership in good standing in a state Bar required
- 5+ years' experience crafting and implementing comprehensive global privacy programs, processes, and procedures
- Experience providing privacy counsel to consumer-facing businesses with large employee populations
- Experience in evaluating and responding to data incidents
- In-house, government, or large law firm experience
- In-depth knowledge and understanding of privacy law, including General Data Protection Regulation (GDPR), U.S. state privacy laws (including CCPA/CPRA and comprehensive state laws), and other federal and international privacy and data protection laws and regulations
- Experience providing guidance and cross-functional collaboration on a wide variety of emerging and evolving topics, including ad tech, tracking technologies, digital marketing programs, consent management, children's privacy, sensitive data categories, geolocation data, biometrics, and automated decision-making
- Familiarity with privacy technology platforms used to manage assessments, data subject requests, and consent
- Ability to build and maintain strong collaborative relationships with business partners
- Effective business writing and presentation skills combined with excellent interpersonal abilities
- Strong communication with experience presenting to senior management and/or external audiences required
- Excellent leadership and project management skills with strong business judgment
- Strong business acuity to evaluate potential strategies and give practical business/legal/compliance advice
- Leadership in developing and maintaining effective privacy policies and initiatives
- Ability to identify, develop and implement specific programs, processes, and procedures within the privacy area
- Attention to detai:
- Working independently and meeting deadlines
- Must be legally authorized to work in the United States for any employer without sponsorship
- Successful completion of interview required to meet job qualification
- Reliable, punctual attendance is an essential function of the position
What will help you propel from the pack (Preferred Qualifications):
Certified Information Privacy Professional (CIPP)/US or Certified Information Privacy Professional (CIPP)/EU certification