Corporate Counsel, Privacy & Digital

Shiseido•New York, NY

3d•Hybrid

About The Position

We are seeking a mid-level Corporate Counsel to join our small but nimble legal team. This role will focus primarily on privacy, data protection, and digital legal matters, while also supporting broader commercial contracting needs. The ideal candidate will bring a practical, business-oriented approach and thrive in a fast-paced, brand-driven environment.

Requirements

Minimum 5-7 years of experience, ideally a mix of in-house and law firm.
J.D. from an accredited law school.
Bar admission, in good standing, in one or more states, including New York.
Familiarity with consumer-facing businesses, preferably in beauty, personal care, CPG, or luxury goods.
Strong working knowledge of current privacy/data protection laws and regulations.
Extensive experience counseling cross functional teams, including brand teams, on privacy/data protection and digital matters.
Experience with commercial contracts and vendor negotiations.
Practical business minded approach with strong communication skills.
Ability to manage multiple competing priorities; comfortable working independently.
Open to continuous learning, both inside and outside traditional subject matter expertise.
Willingness to lean in on projects that involve diverse subject matters.

Responsibilities

Advise on U.S. privacy/data protection laws, regulations, and standards (e.g. CCPA/CPRA; PCI DSS), as well as global data privacy laws and regulations, particularly those most germane to the Company’s regional footprint (e.g., Canada and Brazil) and have a working understanding of the laws and regulations in other key jurisdictions (e.g., GDPR).
Lead development, implementation and maintenance of privacy compliance programs.
Collaborate cross-functionally with IT, Americas Digital Transformation, e-commerce, Brand Marketing, Legal, and global counterparts on data collection, use, and governance matters.
Review and draft privacy related policies and procedures.
Integration and negotiation of data protection clauses or data processing agreements in contracts with service providers, vendors, and other partners.
Stay abreast of ever-changing laws and regulations in privacy and digital space and take proactive steps to ensure business remains compliant.
Provide formal and informal training to cross-functional teams and partners on privacy compliance including emerging laws and regulations.
Provide support to G.C. in defense of adversarial claims and litigation of privacy related matters (e.g., CIPA; web ADA, TCPA).
Lend support on cyber security initiatives, external threats, and incident response.
Review, draft, negotiate and advise on digital and technology agreements, including SaaS, eCommerce services, CRM, data processing, analytics, AI, corporate media, and digital innovations and applications.
Review, draft, negotiate and advise on a wide range of complex legal agreements.
Perform other duties as assigned.