Need help hiring top legal talent? Contact our team.
Company logo

Data Privacy Managing Counsel

Posted May 10
Full Time
Southlake, Texas

The Sabre Legal organization seeks a highly motivated, experienced Data Privacy Managing Legal Counsel to oversee six privacy attorneys and two privacy professionals in support of the Data Privacy Officer who manages the privacy program and function as a whole. This position and the Data Privacy Officer report to the Vice President and Associate General Counsel – Regulatory and Government Affairs, Chief Data Privacy Officer.

Primary Responsibilities

  • Manage four privacy attorneys located globally to execute on privacy programs and workflows as defined by the DPO.
  • Manage with the DPO the development of data privacy lawyers and professionals including individual coaching and education on privacy legal matters and risk-based approaches.
  • Assist in work planning and matter management of privacy contract workstreams.
  • Support the DPO in the design and execution of the privacy program, and tactical and strategic privacy initiatives.
  • Conduct privacy risk assessments and/or privacy impact assessments for new or updated products and services, analyze results to recommend mitigation and remediation activities, as appropriate, ensuring compliance with laws and internal standards.
  • Conduct research, track, report, and provide advice and guidance on existing and emerging global privacy laws and regulations.
  • Advise the DPO in the development, implementation, and coordination of company policies, procedures, and documentation to support privacy initiatives.
  • Advise the DPO with legal input regarding data incidents and data breaches in coordination with security and cross-functional teams.
  • Prepare documents, data flows, data maps, and other materials related to privacy activities.
  • Assist with due diligence and integration of newly acquired companies and divestitures.
  • Coordinate with the DPO and internal product groups to implement privacy by design, including guidance on AI or AdTech, in product engineering.
  • Assist the DPO in complex or escalated product privacy risk and/or privacy impact assessments and provide Data Privacy team support on assessment process as necessary. Partner with internal teams on Privacy AI governance
  • Prepare data protection and data transfer agreement templates for use with clients and vendors, including internal usage guidelines.
  • Provide prompt, consistent, and accurate review, interpretation, and negotiation of data protection agreements with clients and vendors.

Skills And Qualifications

  • J.D. degree required, license to practice law.
  • Resident in the Dallas/Ft. Worth area or willingness to relocate is preferred but not required.
  • Minimum of 5 years of leadership experience
  • Five or more years of relevant Global work experience (privacy program management, legal or compliance). Big law firm or in-house experience with global,
  • Relevant Global work experience (privacy program management, legal or compliance).
  • CIPP/US, CIPP/E, CPIM or other recognized privacy certification preferred.
  • GDPR experience in a global company.
  • Experience in AdTech and AI privacy guidance
  • Prior experience in the application of U.S. and global privacy laws in a commercial environment. B2B experience a plus.
  • Prior commercial transactional law experience in contract negotiation of Data Processing Addendums, Standard Contractual or Model clauses, and supporting privacy-related contractual terms and agreements.
  • Experience working with business partners to integrate and operationalize privacy requirements and concepts into projects and separate phases of product lifecycles.
  • Familiarity and experience with the U.S. and global privacy laws, marketing laws breach notification laws, and ISO standards
  • Incident response experience including regulatory breach notifications-familiarity with new SEC disclosure requirements is a plus.
  • Strong grasp of data privacy contractual clauses and financial implications of audit clauses, breach notifications, liability caps
  • Experience with privacy by design concepts and working with business partners to integrate compliance into projects and separate phases of product lifecycles.
  • Privacy Impact Assessments. Third Party Risk Management (Privacy reviews of vendors) Data Transfer Impact Assessments (experience with One Trust Software) is a plus.
  • Strong ability to understand data flows and implement privacy design in SaaS products, Strong interest in AI, or other Internet technologies.
  • Strong leadership presence and the ability to quickly gain the confidence of business clients.
  • Maturity and strong leadership skills with the capacity to provide direction and to communicate to a variety of stakeholders, including those with and without technical backgrounds.
  • Practical and creative problem analysis and resolution skills.
  • Excellent organizational skills and the ability to simultaneously handle multiple tasks and prioritize work as needed to meet business needs.