Vice President, Head of Privacy (Privacy, Cyber Security, Consumer Compliance)

About the role

The mission of The New York Times is to seek the truth and help people understand the world. This role is within the Commercial Business and Legal Affairs team, reporting to the SVP, Associate General Counsel & Strategic Partnerships.

Responsibilities

• Advises all internal clients on privacy, online safety, and cybersecurity risks and operational controls related to the development, collection, use, transfer, and governance of personal data.
• Advise key business stakeholders on the company’s data governance, cybersecurity, marketing and subscriptions compliance efforts.
• Drive measurable improvements in privacy program maturity, incident readiness, vendor governance, compliant product launches, and privacy risk reduction.
• Manage privacy program resourcing, vendor support, and outside counsel engagement for privacy matters.
• Draft and/or update privacy program-related policies and standards, public-facing and internal; as well as terms of use, terms of sale, and other consumer-facing acceptable use and moderation policies.
• Conduct comprehensive business risk assessments; develop/implement risk mitigation and corrective action plans where needed.
• Advises on privacy regulatory and contractual compliance in marketing, ad sales, direct and programmatic advertising, identity resolution, data clean rooms, and third-party data and ad tech integrations.
• Review, draft and negotiate data protection agreements and security exhibits and work closely with the appropriate teams to advise on third party risk reviews.
• Provide product counseling to include privacy, cybersecurity and consumer compliance legal advice as well as other areas of related legal need – in connection with product and platform developments and releases.
• Regularly track and counsel clients on legal US and international developments in areas of data privacy, cybersecurity and consumer marketing and subscription compliance.
• Serve as legal lead for all security incident response, working closely with the company’s Chief Information Security Officer and other key stakeholders; draft and update information security policies and procedures.
• Provide advice and guidance to data science and analytics teams on privacy-compliant deployment of machine learning models and personalization.
• Oversee and develop company-wide training strategy and execution for areas of coverage.
• Serve as point of contact for data protection authorities, regulatory inquiries, and industry groups.
• Handle high-volume workload efficiently.
• Provide advice and guidance to data science and analytics teams on privacy-compliant deployment of machine learning models and personalization.

Qualifications

• Juris Doctor is required and must be a member of the New York Bar.
• 15+ years of experience in US and international data privacy and protection; negotiating data privacy-related agreements, building, implementing, and maintaining a global privacy program; supporting cybersecurity.
• 5+ years of experience managing people with proven experience effectively managing cross-functional relationships and competing priorities.
• 5+ years of previous in-house experience.
• Experience advising on online safety laws such as age-appropriate design codes and app store age signals laws, and sensitive data privacy regulations such as laws governing health data in ad tech and biometric privacy.
• Experience advising or managing legal professionals who advise on a wide variety of consumer-related issues both domestic and international, including payflow, subscription offerings, marketing, auto-renewal and click-to-cancel laws, anti-spam, Telephone Consumer Protection Act, unfair and deceptive practice laws, customer care complaints and escalations, and payment card rules.

Bonus and Benefits

Additional Compensation and Benefits: For roles in the U.S., dependent on your role, you may be eligible for variable pay, such as an annual bonus and restricted stock. Benefits may include medical, dental and vision benefits, Flexible Spending Accounts (F.S.A.s), a company-matching 401(k) plan, employee stock purchase plan, paid vacation, paid sick days, paid parental leave, tuition reimbursement and professional development programs. For roles outside of the U.S., information on benefits will be provided during the interview process.