Title and Summary

Senior Counsel, Privacy, AI & Data Responsibility

Overview
Mastercard is committed to balancing innovation while protecting individual privacy and has embraced privacy and data protection as core to the successful execution of its business strategy. As part of that commitment Mastercard has established a world-class privacy program and is currently adding talent to its global team.
The Senior Counsel, Privacy & Data Protection will support Consumer Solutions within Mastercard's core business, with a particular focus on the global Optimization product team. As a member of the global Privacy, AI, and Data Responsibility ("PAIR") Team, the Senior Counsel will join a team of other PAIR attorneys enabling business teams through Mastercard's Privacy by Design approach and reinforcing Mastercard's leadership in responsible, data-driven innovation.
The Senior Counsel position will report to the Senior Managing Counsel, Privacy & Data Protection, and function as a privacy, AI, and data responsibility subject matter expert within Mastercard's Law Department. The role is for our global headquarters in Purchase, NY.
Role
The Senior Counsel, Privacy & Data Protection will provide global PAIR support for Consumer Solutions, with a primary focus on supporting the global Optimization product team, whose mission is to empower Mastercard to optimize and help customers realize the full potential of the Mastercard solutions. The Optimization team works alongside the product and engineering teams focused on strategy, governance, data & analytics, optimization, commercialization, distribution, and fintechs. The selected candidate must have the ability to understand complex privacy and data protection laws and the operational and technical requirements behind compliance with these laws. The Senior Counsel will assist in developing creative solutions to support commercial objectives while ensuring compliance with privacy and data protection laws globally. Activities include:
• Support Mastercard's operationalization of compliance with privacy and data related laws - including, for example, CCPA/CPRA, GLBA, PIPEDA, GDPR, GDPL and other current and forthcoming privacy laws around the globe.
• Identify legal, business, and technical infrastructure requirements and controls to enable privacy compliance adopting the Privacy by Design process; work with legal, business, technical teams to assist implementation.
• Monitor for emerging regulatory developments and translate legal terms into business requirements.
• Define processes, workflows, and training material for support service personnel to facilitate legal compliance with applicable privacy and data protection laws and regulations.
• Assist the team to record data protection impact assessments where required, and to identify and implement privacy controls and safeguards to mitigate risks.
• Draft and negotiate data processing terms and agreements with vendors and customers, including in relation to international data transfers, consent and notice representations and other data-related contract provisions.
• Draft privacy notices and review consumer-facing material, including marketing and communications campaigns, for compliance with applicable privacy and data protection requirements.
• Maintain records of processing for all personal data processing activities as required under applicable data protection laws, regulations, and standards.
• Engage with the organization to assist in training employees on privacy and data protection requirements, handle privacy-related queries and raise employee awareness about privacy and data protection developments.

All About You
A little about our ideal candidate:
• JD from an accredited law school and admitted to at least one bar in the United States.
• Any additional qualifications (e.g., Master of Laws degree) considered an asset.
• Strong experience in privacy and data protection law. IAPP certification an asset but not sufficient without relevant experience.
• Oral and written fluency, including legal drafting and presentation skills.
• Proficiency in providing privacy subject matter expertise to fast-moving product business and legal teams throughout the product lifecycle (ideation, design, development, deployment and enhancements)
• Expertise in and track record of dealing with global privacy and data protection laws.
• Pro-active approach to problem-solving with a demonstrated track record of successfully translating legal requirements into practical, actionable advice.
• Expertise in applying privacy and data protection analysis on emerging technologies, including various biometric modalities, encryption techniques, artificial intelligence & machine learning, and privacy enhancing technologies (PETs) highly valued.
• Strong command of technology, software and/or engineering, including software development, e.g. technical use, administration, development, design, data flows and architecture of the aforementioned technology an asset.
• Knowledge of interactive marketing technologies, including cookies and other passive data collection technologies.
• Familiarity with the payments industry or financial services industry a plus.
• Ability to familiarize with privacy and data protection legal frameworks in other jurisdictions quickly.
• Experience in managing projects independently.
• Motivated self-starter with ability to excel at multi-tasking in a fast-paced environment.
• Strong analytic capabilities and written and oral communication skills and ability to simplify technical material for other audiences, including business teams, legal departments, regulators, etc. Attention to detail is a must.
• Exceptional interpersonal skills with proven experience in relationship building and partnering. Must work well in both team and individual settings.
• Superior time management, planning, and organizational skills.
• Ability to motivate and influence highly skilled professionals to achieve major organizational goals.

Corporate Security Responsibility

All activities involving access to Mastercard assets, information, and networks comes with an inherent risk to the organization and, therefore, it is expected that every person working for, or on behalf of, Mastercard is responsible for information security and must:

• Abide by Mastercard's security policies and practices;
• Ensure the confidentiality and integrity of the information being accessed;
• Report any suspected information security violation or breach, and
• Complete all periodic mandatory security trainings in accordance with Mastercard's guidelines.

In line with Mastercard's total compensation philosophy and assuming that the job will be performed in the US, the successful candidate will be offered a competitive base salary and may be eligible for an annual bonus or commissions depending on the role. The base salary offered may vary depending on multiple factors, including but not limited to location, job-related knowledge, skills, and experience. Mastercard benefits for full time (and certain part time) employees generally include: insurance (including medical, prescription drug, dental, vision, disability, life insurance); flexible spending account and health savings account; paid leaves (including 16 weeks of new parent leave and up to 20 days of bereavement leave); 80 hours of Paid Sick and Safe Time, 25 days of vacation time and 5 personal days, pro-rated based on date of hire; 10 annual paid U.S. observed holidays; 401k with a best-in-class company match; deferred compensation for eligible roles; fitness reimbursement or on-site fitness facilities; eligibility for tuition reimbursement; and many more. Mastercard benefits for interns generally include: 56 hours of Paid Sick and Safe Time; jury duty leave; and on-site fitness facilities in some locations.

Pay Ranges
Purchase, New York: $204,000 - $325,000 USD