Compliance & Privacy Officer – US & Canada

Continental•Fort Mill, SC

1d•Hybrid

About The Position

The Compliance & Privacy Officer supports key elements of Continental’s compliance program, including its Code of Conduct, business ethics, compliance risk assessments, policies and procedures, internal controls, and other compliance initiatives. The role is accountable for the US and Canada privacy program, ensuring compliance with evolving privacy laws and embedding privacy requirements into business processes, third-party relationships, and AI initiatives. The successful candidate will use strong analytical skills and sound judgment on sensitive matters, communicate practical compliance guidance, and partner with stakeholders across a global organization. The position supports day-to-day compliance activities involving conflicts of interest, external business activities, gifts and hospitality, and sponsorships. It also helps promote ethical conduct, implement and monitor compliance requirements, deliver regionalized training and policy updates, maintain policies and governance frameworks, identify risks and process improvements, and translate legal and regulatory developments into actionable guidance. For privacy matters, the role advises on applicable US and Canadian privacy laws, drafts and negotiates privacy and data-protection terms, and collaborates with Information and Cyber Security and IT on incident response. It leads or supports privacy governance documentation, conducts privacy impact assessments and risk evaluations, advises on data collection and use, and assists with regulatory inquiries, audits, and data subject requests.

Requirements

Bachelor’s degree.
JD degree from an ABA-accredited law school.
Admission to the bar in at least one state.
At least 5 years of experience as an attorney in a corporation, law firm, or both.
Proven track record in compliance and data privacy.
Strong understanding of GDPR, CCPA/CPRA, VCDPA, and other relevant privacy frameworks.
Experience drafting and negotiating technology, SaaS, AI initiative, and data-related agreements.
Strategic legal thinking and business acumen.
Exceptional communication and negotiation skills.
Intercultural sensitivity and leadership.
Project management and analytical skills.
Legal authorization to work in the United States.

Nice To Haves

Fluency in Spanish and/or Portuguese.
Work experience in a global manufacturing and technology company.
Tire and/or automotive industry experience.
At least 7 years of experience as an attorney in a corporation, law firm, or both.

Responsibilities

Support day-to-day compliance activities related to conflicts of interest, external business activities, gifts and hospitality, and sponsorships.
Promote a culture of integrity, ethical business conduct, accountability, and regulatory compliance.
Support implementation and monitoring of requirements concerning anti-corruption, antitrust, anti-money laundering, and business ethics.
Regionalize and deliver compliance training materials and policy updates.
Assist in refining and maintaining compliance policies, procedures, and governance frameworks.
Identify compliance risks, process improvements, opportunities to resolve issues, and risk-based compliance and privacy controls.
Monitor legislative, regulatory, and enforcement developments and provide practical guidance to the business.
Advise on compliance with applicable privacy laws, including GDPR, CCPA/CPRA, and VCDPA.
Draft, review, and negotiate data protection agreements, privacy terms, vendor contracts, and cross-border data transfer mechanisms.
Collaborate with Information and Cyber Security and IT on incident response, including breach assessment, notification obligations, regulatory reporting, mitigation, and process improvement.
Lead and support privacy governance documentation, including records of processing activities, data inventories, privacy policies, internal procedures, and data retention schedules.
Conduct Privacy Impact Assessments, data mapping, and privacy risk evaluations for products, technologies, systems, AI solutions, vendors, and business initiatives.
Integrate privacy-by-design principles and regulatory requirements into business operations.
Provide legal guidance on data collection, use, retention, and sharing, including consent, cookies, and marketing practices.
Monitor and interpret evolving privacy laws and guidance, and develop and deliver privacy awareness and training.
Assist with regulatory inquiries, audits, and responses to data subject requests.