Responsibilities

As part of the Commercial Business and Legal Affairs team and reporting to the SVP, Associate General Counsel & Strategic Partnerships, the Vice President, Head of Privacy (Privacy, Cyber Security, Consumer Compliance) is responsible for all legal aspects of data privacy, information security, and consumer marketing and subscriptions-related compliance across the company and for managing the Company's privacy compliance function. You will work closely with senior executives and operational leads as well as the working team, including the areas of marketing operations, subscription growth, product, engineering, technology, data governance, information security, commercial contracts, and marketing and advertising technology. In this position, you will manage a team.
This is a hybrid role based in our New York City headquarters. You can typically expect to come into the office 3 days per week.
Advise all internal clients on the risks and operational controls related to the development, collection, use, transfer, and governance of personal data of consumers, employees, and other stakeholders. This will include privacy, online safety, and cybersecurity (from both U.S. and international perspectives).
Advise key business stakeholders on the company’s data governance, cybersecurity, marketing and subscriptions compliance efforts in a manner consistent with the Company’s goals and culture.
Drive measurable improvements in privacy program maturity, incident readiness, vendor governance, compliant product launches, and privacy risk reduction. Manage privacy program resourcing, vendor support, and outside counsel engagement for privacy matters, as applicable.
Draft and/or update privacy program-related policies and standards, public-facing and internal; as well as terms of use, terms of sale, and other consumer-facing acceptable use and moderation policies.
Supervise and oversee the preparation and updating of Data Protection Impact Assessments and other risk assessment and audit activities as needed. Conduct comprehensive business risk assessments; develop/implement risk mitigation and corrective action plans where needed.
Advise on privacy regulatory and contractual compliance in marketing, ad sales, direct and programmatic advertising, identity resolution, data clean rooms, and third-party data and ad tech integrations to help ensure compliance with privacy and consumer protection laws and industry standards.
Review, draft and negotiate data protection agreements and security exhibits and work closely with the appropriate teams to advise on third party risk reviews.
Advise on all relevant consumer protection, subscriptions and marketing laws, regulations and best practices.
Provide product counseling to include privacy, cybersecurity and consumer compliance legal advice as well as other areas of related legal need – in connection with product and platform developments and releases.
Regularly track and counsel clients on legal US and international developments in areas of data privacy, cybersecurity and consumer marketing and subscription compliance.

Qualification

Additional Compensation and BenefitsFor roles in the UFor roles outside of the U$275Candidate Use of GenAI Tools

Required

Juris Doctor is required and must be a member of the New York Bar.
15+ years of experience in US and international data privacy and protection; negotiating data privacy-related agreements, building, implementing, and maintaining a global privacy program; supporting cybersecurity.
5+ years of experience managing people with proven experience effectively managing cross-functional relationships and competing priorities.
5+ years of previous in-house experience.
Experience advising on online safety laws such as age-appropriate design codes and app store age signals laws, and sensitive data privacy regulations such as laws governing health data in ad tech and biometric privacy.
Experience advising or managing legal professionals who advise on a wide variety of consumer-related issues both domestic and international, including payflow, subscription offerings, marketing, auto-renewal and click-to-cancel laws, anti-spam, Telephone Consumer Protection Act, unfair and deceptive practice laws, customer care complaints and escalations, and payment card rules.

Preferred

5+ years in-house experience at a tech platform, media company, and/or subscription-first company.
Additional Compensation and Benefits:
For roles in the U.S., dependent on your role, you may be eligible for variable pay, such as an annual bonus and restricted stock. Benefits may include medical, dental and vision benefits, Flexible Spending Accounts (F.S.A.s), a company-matching 401(k) plan, employee stock purchase plan, paid vacation, paid sick days, paid parental leave, tuition reimbursement and professional development programs.
For roles outside of the U.S., information on benefits will be provided during the interview process.
The annual base pay range for this role is between:
$275,000—$315,000 USD
Candidate Use of GenAI Tools:
We’re excited to learn more about you and your experience. To keep our hiring process as fair and authentic as possible, we ask that you submit your own work and not use GenAI tools to generate substantive content during the application and interview process.

Vice President, Head of Privacy (Privacy, Cyber Security, Consumer Compliance) at The New York Times · LumiJobs

Vice President, Head of Privacy (Privacy, Cyber Security, Consumer Compliance)

Responsibilities

Qualification

Required

Preferred

Benefits

Company

The New York Times

More roles at The New York Times