Counsel – Privacy, Cybersecurity, AI & Product Technology

Stanley Black & Decker, Inc. • Washington, DC

1d • $118,300 - $181,367 • Remote

About The Position

The Counsel – Privacy, Cybersecurity, AI & Product Technology provides practical, business-oriented legal advice on Stanley Black & Decker’s privacy, cybersecurity, artificial intelligence, technology, consumer privacy, and product compliance initiatives. Reporting to the VP, Global Privacy and Technology Governance Counsel, the role serves as an embedded legal partner to teams across the Americas and contributes to global governance programs. The Counsel independently manages appropriately scoped matters, collaborates with senior counsel on complex or enterprise-significant issues, and helps identify and address legal risk early in technology procurement, product development, commercialization, and customer engagement, particularly for technology-enabled and connected products.

The role advises on privacy, data protection, cybersecurity, data governance, digital compliance, and responsible AI; supports consumer privacy programs and incident preparedness and response; conducts and documents privacy, security, and AI risk assessments; and uses OneTrust for privacy program workflows. It also partners with supply management, IT, cybersecurity, privacy, and business teams on technology procurement and contracting, including SaaS, cloud, software, data processing, AI, and cybersecurity terms. The Counsel supports commercial negotiations and product development and go-to-market reviews, advises on connected product compliance, and provides localized legal guidance to business partners across the United States, Canada, Latin America, and the Caribbean.

The position is remote and based in Maryland, Virginia, Delaware, or the Washington, DC area. Professional fluency in English and Spanish and/or Portuguese is required. The listed annual full-time salary range is $118,300 to $181,366.66, with the actual offer subject to factors including job level, location, qualifications, and experience.

Requirements

• Juris Doctor or equivalent law degree and authorization to practice law in at least one relevant jurisdiction.
• Approximately 5–10 years of progressively responsible legal experience in a law firm, corporate legal department, government, or comparable setting.
• Demonstrated experience in several of the following areas: privacy and data protection, cybersecurity, technology transactions, AI governance, commercial law, consumer privacy, product compliance, or connected products, with the ability and interest to develop in the remaining areas.
• Experience preparing, reviewing, and documenting PIAs and DPIAs, including identifying and tracking appropriate mitigation measures.
• Hands-on experience using OneTrust for privacy assessments, workflows, records, reporting, and related privacy program activities.
• Ability to independently analyze complex legal and technical information, identify material issues, and convert findings into clear, commercially practical advice.
• Strong legal research, drafting, negotiation, project management, organization, and written and verbal communication skills.
• Sound judgment, ownership, responsiveness, and the ability to recognize when escalation or additional subject-matter support is appropriate.
• Ability to collaborate across functions, cultures, time zones, and levels of seniority in a fast-moving global organization.
• Professional fluency in English and Spanish and/or Portuguese.

Responsibilities

• Provide day-to-day legal guidance on privacy, data protection, cybersecurity, data governance, digital compliance, and responsible AI matters.
• Support the consumer privacy program, including consumer-facing privacy requirements, notices, consent and preference management, consumer rights processes, retention, and marketing practices across the Americas.
• Prepare, review, and maintain Privacy Impact Assessments (PIAs) and Data Protection Impact Assessments (DPIAs), recommend mitigation measures, and track follow-up.
• Use OneTrust to manage privacy intake, assessments, workflows, records, approvals, reporting, and compliance evidence.
• Conduct privacy, security, and AI risk assessments and provide practical recommendations to stakeholders.
• Translate legal and regulatory requirements into controls, playbooks, contract positions, product requirements, and business guidance.
• Monitor relevant legal and regulatory developments across the Americas and support impact assessments, readiness planning, policies, standards, and training.
• Support incident preparedness and response through legal research, fact development, documentation, notification analysis, and coordination with internal teams and outside counsel.
• Manage AI governance intake, risk review, approvals, documentation, acceptable-use guardrails, and ongoing monitoring for appropriately scoped matters.
• Partner with Global Supply Management, its counsel, IT, Cybersecurity, Privacy, and business stakeholders throughout technology vendor intake, diligence, sourcing, negotiation, onboarding, and lifecycle management.
• Review, draft, and negotiate technology-related agreements and exhibits, including SaaS, cloud, software, professional services, data processing and transfer terms, cybersecurity requirements, AI terms, statements of work, technology licensing terms, and confidentiality agreements.
• Support and, where appropriate, lead customer-facing commercial negotiations involving technology products, digital services, connected products, data use, cybersecurity, privacy, AI, audit rights, regulatory commitments, and risk allocation.
• Apply contracting playbooks and escalation criteria, identify nonstandard or higher-risk positions, develop alternatives, and present recommendations to senior counsel and business partners.
• Develop and maintain reusable clauses, guidance, checklists, and training to improve consistency and efficiency in procurement and commercial sales.
• Advise product, engineering, digital, cybersecurity, marketing, sales, quality, and regulatory teams on legal requirements affecting technology-enabled and connected products.
• Support and independently manage scoped product development and go-to-market reviews involving privacy by design, secure by design, AI-enabled features, consumer transparency, data collection and use, connectivity, software, digital services, and product claims.
• Assess product compliance obligations across relevant Americas markets and coordinate with senior, local, and subject-matter counsel as needed.
• Review product documentation, disclosures, notices, terms, instructions, internal approvals, and evidence of compliance.
• Support issue escalation and remediation when product, cybersecurity, privacy, AI, regulatory, or customer requirements intersect.
• Serve as a responsive legal partner to business teams across the United States, Canada, Latin America, and the Caribbean, with particular focus on Spanish- and Portuguese-speaking markets.
• Build trusted relationships with regional legal, commercial, procurement, digital, product, IT, cybersecurity, privacy, and compliance stakeholders.
• Deliver practical education and localized guidance reflecting regional law, language, business context, and global company standards.
• Prioritize and manage regional matters within scope, escalating complex, novel, or high-risk issues with clear facts, analysis, and recommended next steps.

Benefits

• Medical, dental, life, vision, and disability coverage.
• 401(k) and Employee Stock Purchase Plan.
• Paid time off, including paid vacation, holidays, and personal days.
• Tuition reimbursement.
• Wellness program and other well-being programs and benefits.
• Discounts on Stanley Black & Decker tools and products, and discount programs for other vendors and partners.
• Access to learning resources, including a digital learning portal, Lean Academy, and online university.
• Career development opportunities across the global company.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level