Job Description
As Privacy Counsel, you'll have a broad range of responsibilities providing legal guidance on global projects affecting privacy, data protection and security. You will partner with our InfoSec, procurement, engineering, product and other teams to advise on data uses while managing legal risk and ensuring regulatory compliance. You will also be called upon to provide privacy and data security expertise to our commercial attorneys as they negotiate complex commercial deals that contribute to our products' success, and to partner with product counsel in counseling product and engineering teams on data uses. As we expand our offerings globally, your ideas and contributions will make an immediate impact.
You Will, under the direction of Privacy Counsel:
Provide privacy and data security subject-matter expertise and guidance to legal colleagues (including commercial, product and employment counsel), InfoSec, procurement, product and engineering teams
Partner with commercial counsel and procurement to provide privacy subject-matter support for commercial agreements and vendor management
Respond to privacy and security related customer and regulatory inquiries and investigations, and draft regulatory filings, coordinating such responses with global positions
Draft external privacy notices and disclosures, and manage/update internal policies and procedures to ensure compliance with global laws bearing on privacy and cybersecurity
Help develop, enhance, scale and run the existing global privacy program, including: privacy operations and documentation; employee training on data privacy and security; policy enforcement; privacy compliance program monitoring and auditing; and third-party risk assessment. Ensure the program's ongoing and efficient operation.
Work with Privacy Engineering, InfoSec, Compliance, and Trust & Safety teams to scope and perform periodic data privacy hygiene assessments, mitigation and remediation, including data privacy by design and default, accountability and compliance monitoring, and the mitigation of privacy and security risks
Remain up-to-date on relevant consumer protection, privacy and data security laws and regulations, industry approaches to privacy program management, and on privacy and security technological developments, threat vectors, and evolving industry standards to provide an ongoing ability to provide sound compliance advice
Qualifications
You Have:
4+ years of top law firm experience
Experience providing actionable advice to clients on different legal risks and obligations under privacy and data security laws in the U.S. and Europe (including CCPA and GDPR)
Advised on and managed internal privacy policies, procedures and data lifecycle, security and privacy. Developed and implemented external privacy notices
Manage projects
Work in an evolving and growing environment that is prone to changes
Sound, practical business judgment, and creativity solving problems
A JD and active membership in at least one state bar
Additional Information At Square, we value diversity and always treat all employees and job applicants based on merit, qualifications, competence, and talent. We do not discriminate on the basis of race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status. We will consider for employment qualified applicants with criminal histories in a manner consistent with the requirements of the San Francisco Fair Chance Ordinance. Applicants in need of special assistance or accommodation during the interview process or in accessing our website may contact us by sending an email to assistance(at)squareup.com. We will treat your request as confidentially as possible. In your email, please include your name and preferred method of contact, and we will respond as soon as possible. PERKS At Square, we want you to be well and thrive. Our global benefits package includes: