The Senior Counsel, Privacy & Data Protection will support both the strategy and the daily operations of the Privacy and Data Protection Team with a global remit, while enabling business teams through Mastercard's Privacy by Design approach and reinforcing Mastercard's world leadership in responsible, data-driven innovation.
The position will report to the Senior Managing Counsel, Privacy & Data Protection, will be a member of the Global Privacy & Data Protection team as well as a member of the Law Department, and will operate out of our Purchase, Waterloo, London office - open to other locations.

Role:
The Senior Counsel, Privacy & Data Protection will support the Privacy and Data Protection team to ensure privacy compliance is built into Mastercard data-driven products and services offerings in the network and digital payments space, with a specific emphasis on the company's Authentication and e-commerce solutions (e.g., ID&V technologies, device passkeys, biometrics, and tokenization). The selected candidate must have the ability to understand complex data laws (including but not limited to privacy, data protection and AI laws) and the operational and technical requirements behind compliance with these laws. The Senior Counsel will assist in developing creative solutions while ensuring compliance with data laws globally. Activities include:
• Support Mastercard's operationalization of compliance with privacy and data related laws - including, for example, CCPA/CPRA, GLBA, PIPEDA, GDPR, GDPL and other current and forthcoming privacy laws around the globe.
• Identify legal, business, and technical infrastructure requirements and controls to enable privacy compliance adopting the Privacy by Design process; work with legal, business, technical teams to assist implementation.
• Monitor for emerging regulatory developments and translate legal terms into business requirements.
• Define processes, workflows, and training material for support service personnel to facilitate legal compliance with applicable privacy and data protection laws and regulations.
• Assist the team to record data protection impact assessments where required, and to identify and implement privacy controls and safeguards to mitigate risks.
• Draft privacy notices and review consumer-facing material, including marketing and communications campaigns, for compliance with applicable privacy and data protection requirements.
• Maintain records of processing for all personal data processing activities as required under applicable data protection laws, regulations, and standards.
• Engage with the organization to assist in training employees on privacy and data protection requirements, handle privacy-related queries and raise employee awareness about privacy and data protection developments.

All About You:
A little about our ideal candidate:
• Law degree required.
• Admitted as an attorney in the relevant office jurisdiction
• Any additional qualifications (e.g., Master of Laws degree) considered an asset.
• Strong experience in privacy and data protection law. IAPP certification an asset but not sufficient without relevant experience.
• Oral and written fluency, including legal drafting and presentation skills.
• Proficiency in providing privacy subject matter expertise to fast-moving product business and legal teams throughout the product lifecycle (ideation, design, development, deployment and enhancements)
• Expertise in and track record of dealing with global privacy and data protection laws.
• Pro-active approach to problem-solving with a demonstrated track record of successfully translating legal requirements into practical, actionable advice.
• Expertise in applying privacy and data protection analysis on emerging technologies, including various biometric modalities, encryption techniques, artificial intelligence & machine learning, and privacy enhancing technologies (PETs) highly valued.
• Strong command of technology, software and/or engineering, including software development, e.g. technical use, administration, development, design, data flows and architecture of the aforementioned technology an asset.
• Knowledge of interactive marketing technologies, including cookies and other passive data collection technologies.
• Familiarity with the payments industry or financial services industry a plus.
• Ability to familiarize with privacy and data protection legal frameworks in other jurisdictions quickly.
• Experience in managing projects independently.
• Motivated self-starter with ability to excel at multi-tasking in a fast-paced environment.
• Strong analytic capabilities and written and oral communication skills and ability to simplify technical material for other audiences, including business teams, legal departments, regulators, etc. Attention to detail is a must.
• Exceptional interpersonal skills with proven experience in relationship building and partnering. Must work well in both team and individual settings.
• Superior time management, planning, and organizational skills.
• Ability to motivate and influence highly skilled professionals to achieve major organizational goals.

Pay Range:

Purchase, NY $187,000-300,000

Mastercard is an inclusive equal opportunity employer that considers applicants without regard to gender, gender identity, sexual orientation, race, ethnicity, disabled or veteran status, or any other characteristic protected by law. In the US or Canada, if you require accommodations or assistance to complete the online application process or during the recruitment process, please contact reasonable_accommodation@mastercard.com and identify the type of accommodation or assistance you are requesting. Do not include any medical or health information in this email. The Reasonable Accommodations team will respond to your email promptly.

Corporate Security Responsibility

All activities involving access to Mastercard assets, information, and networks comes with an inherent risk to the organization and, therefore, it is expected that every person working for, or on behalf of, Mastercard is responsible for information security and must:

• Abide by Mastercard's security policies and practices;
• Ensure the confidentiality and integrity of the information being accessed;
• Report any suspected information security violation or breach, and
• Complete all periodic mandatory security trainings in accordance with Mastercard's guidelines.

In line with Mastercard's total compensation philosophy and assuming that the job will be performed in the US, the successful candidate will be offered a competitive base salary based on location, experience and other qualifications for the role and may be eligible for an annual bonus or commissions depending on the role. Mastercard benefits for full time (and certain part time) employees generally include: insurance (including medical, prescription drug, dental, vision, disability, life insurance), flexible spending account and health savings account, paid leaves (including 16 weeks new parent leave, up to 20 paid days bereavement leave), 10 annual paid sick days, 10 or more annual paid vacation days based on level, 5 personal days, 10 annual paid U.S. observed holidays, 401k with a best-in-class company match, deferred compensation for eligible roles, fitness reimbursement or on-site fitness facilities, eligibility for tuition reimbursement, gender-inclusive benefits and many more.