Compliance & Privacy Officer – US & Canada

Continental•Old Point Station, SC

2d•Hybrid

About The Position

The Compliance & Privacy Officer supports key elements of Continental’s compliance program, including its Code of Conduct, business ethics, compliance risk assessments, policies and procedures, internal controls, and related initiatives. The role is accountable for the US and Canada privacy program, ensuring compliance with evolving privacy laws and integrating privacy requirements into business processes, third-party relationships, and AI initiatives. The successful candidate applies strong analytical skills and sound judgment to sensitive matters, communicates practical compliance guidance, and partners with stakeholders across a complex international organization. The role supports day-to-day compliance activities involving conflicts of interest, external business activities, gifts and hospitality, and sponsorships. It promotes ethical conduct and accountability; supports anti-corruption, antitrust, anti-money laundering, and business ethics requirements; regionalizes and delivers training and policy updates; maintains compliance policies and governance frameworks; identifies risks and process improvements; and monitors legal and regulatory developments. For privacy, the position advises on applicable US and Canadian privacy requirements, drafts and negotiates data protection and technology-related agreements, and collaborates with Information and Cyber Security and IT on incident response. It develops and maintains privacy governance documentation, conducts privacy impact assessments and data mapping, provides guidance on data collection and use, and supports training, regulatory inquiries, audits, and data subject requests.

Requirements

Bachelor’s degree.
Juris Doctor degree from an ABA-accredited law school.
Admission to the bar in at least one state.
At least 5 years of experience as an attorney in a corporation, law firm, or both.
Proven track record in compliance and data privacy.
Strong understanding of GDPR, CCPA/CPRA, VCDPA, and other relevant privacy frameworks.
Experience drafting and negotiating technology, SaaS, AI initiative, and data-related agreements.
Strategic legal thinking and business acumen.
Exceptional communication and negotiation skills.
Intercultural sensitivity and leadership.
Project management and analytical skills.
Legal authorization to work in the United States is required. Visa support is available only to internal individuals who currently hold an existing valid employment visa.

Nice To Haves

Fluency in Spanish and/or Portuguese.
Work experience in a global manufacturing and technology company.
Tire and/or automotive industry experience.
At least 7 years of experience as an attorney in a corporation, law firm, or both.

Responsibilities

Support day-to-day compliance activities related to conflicts of interest, external business activities, gifts and hospitality, and sponsorships.
Promote a culture of integrity, ethical business conduct, accountability, and regulatory compliance.
Support implementation and monitoring of requirements related to anti-corruption, antitrust, anti-money laundering, and business ethics.
Regionalize and deliver compliance training materials and policy updates.
Assist with refining and maintaining compliance policies, procedures, and governance frameworks.
Identify compliance risks, process improvements, opportunities to resolve issues, and effective risk-based compliance and privacy controls.
Monitor legislative, regulatory, and enforcement developments and translate them into practical business guidance.
Advise the business on emerging risks, trends, and obligations in compliance, ethics, privacy, data protection, and AI governance.
Advise on compliance with applicable US and Canadian privacy laws and other relevant privacy regulations.
Draft, review, and negotiate data protection agreements, privacy terms, vendor contracts, and cross-border data transfer mechanisms.
Collaborate with Information and Cyber Security and IT on incident response, including breach assessment, notification obligations, regulatory reporting, risk mitigation, remediation strategies, and process improvement.
Develop, implement, and maintain privacy governance documentation, including records of processing activities, data inventories, privacy policies, internal procedures, and data retention schedules.
Conduct Privacy Impact Assessments, data mapping, and privacy risk evaluations for products, technologies, systems, AI solutions, vendors, and business initiatives.
Integrate privacy-by-design principles and regulatory requirements into business operations.
Provide legal guidance on data collection, use, retention, and sharing, including consent, cookies, and marketing practices.
Monitor and interpret privacy laws and guidance, and develop and deliver privacy awareness and training.
Assist with regulatory inquiries, audits, and responses to data subject requests.