Counsel, Privacy, AI & Data Protection

Arrow Electronics•Alpharetta, GA

13d•Hybrid

About The Position

Arrow Electronics is a global provider of products, services, and solutions to industrial and commercial users of electronic components and enterprise computing solutions. Arrow Electronics guides innovation forward for over 220,000 leading technology manufacturers and service providers. With 2024 sales of $27.9 billion, Arrow develops technology solutions that improve business and daily life. The company maintains 228 locations worldwide with over 85 countries served. A Fortune 154 company with 21,500 employees worldwide, Arrow brings technology solutions to a breadth of markets, including telecommunications, information systems, transportation, medical, industrial, and consumer electronics. Arrow provides specialized services and expertise across the entire product lifecycle. Arrow does this by connecting customers to the right technology at the right place, time, and price. Arrow provides extraordinary value to customers and suppliers - the best technology companies in the world - and connects them through the company's industry-leading services. The Counsel, Privacy, AI & Data Protection serves as a strategic, pragmatic legal advisor guiding the company’s privacy, cybersecurity, AI governance, and enterprise data protection programs. This role partners closely with cross-functional teams to enable responsible innovation while ensuring compliance with evolving U.S. and global privacy and AI requirements. While this role could be called upon for guidance related to all aspects of the key responsibilities contained in this description, there will be a heavy focus on establishing and executing a prioritized roadmap for enterprise AI governance aligned with product and business goals.

Requirements

Juris Doctor (JD) from an accredited law school and active bar membership (or ability to obtain/maintain as required).
5+ years of relevant legal experience with a strong focus on privacy, data protection, cybersecurity, and AI governance (law firm and/or in-house).
Hands-on experience building and operationalizing AI governance principles, controls, and documentation; comfort advising on AI/ML/LLMs and emerging AI regulation.
Demonstrated experience advising cross-functionally and translating regulatory obligations into pragmatic business solutions.
Strong drafting and negotiation skills for data-related and technology agreements, including vendor/customer contracting and privacy/security terms

Nice To Haves

Deep knowledge of U.S. state privacy laws and familiarity with global privacy frameworks; experience supporting regulated or consumer-facing products.
Experience with GRC/compliance programs, audit support, and risk assessments (privacy/security/AI).
Familiarity with online advertising and tracking technologies and consent requirements (e.g., cookies/pixels/SDKs).

Responsibilities

AI Governance, Responsible AI & Emerging Technology Provide legal leadership on AI governance and responsible adoption of AI/ML/LLMs, including risk-based reviews, internal controls, documentation, and oversight mechanisms (e.g., transparency, accountability, human oversight).
Monitor and interpret AI legal and regulatory developments, and develop internal guidance/training aligned to best practices, frameworks, and evolving global and U.S. state automated decision-making laws.
Partner with AI/Data teams to implement legal, technical, and operational requirements for AI solutions as regulations and enforcement evolve globally; support development/review of Responsible AI documentation.
Privacy & Data Protection Compliance (U.S. + Global) Advise on privacy and data protection laws and regulatory trends (e.g., U.S. state privacy laws, GDPR, sectoral requirements as applicable), and embed “privacy-by-design” into products and operations.
Lead and/or oversee privacy impact assessments and data protection impact assessments, and maintain core privacy program artifacts (e.g., records of processing, DPIAs/PIAs).
Partner with Marketing and digital teams on privacy requirements for cookies, pixels, SDKs, analytics/advertising technologies, and consent management practices.
Cybersecurity & Incident Response Provide legal support for cybersecurity programs, including incident response planning and execution, investigations, audits, and regulatory inquiries related to data practices.
Advise on data management and security practices supporting infrastructure/software development and advanced analytics/AI use cases (financial services or other regulated environments as applicable).
Commercial Contracting, Vendor Diligence & Data/AI Agreements Draft, review, and negotiate data protection agreements, vendor and technology contracts, and privacy provisions; support procurement and vendor management processes.
Conduct privacy and AI vendor diligence and governance reviews, including assessment of vendor controls and risk posture for data processing and AI capabilities.
Where relevant to the business model, advise on SaaS/platform legal issues related to content compliance, datasets, model documentation (e.g., model/data cards), licensing/IP considerations, and terms of use.
Program Development, Training & Stakeholder Enablement Maintain and update internal privacy/data governance policies; create external/customer-facing privacy documentation (e.g., FAQs, data sheets) to support transparency and trust.
Drive training and awareness programs on privacy, cybersecurity, and AI governance; develop playbooks and practical guidance for cross-functional teams.
Shape and execute a forward-looking roadmap for privacy and AI initiatives to support business growth and product expansion.