In-House Privacy Counsel

CRC Insurance Services • Charlotte, NC

75d

About The Position

The In-House Privacy Counsel will lead all aspects of data privacy and protection across the organization. This role will be responsible for providing strategic direction for the company's privacy compliance program, including policy development, risk assessment, incident response, and training. The successful candidate will bring deep expertise in privacy law and cybersecurity regulations, and will collaborate closely with cross-functional teams to ensure compliance and mitigate risk. This role is hybrid in Charlotte NC.

Requirements

• Juris Doctor (JD) from an ABA-accredited law school (Required)
• Licensed to practice law in any U.S. state (Required)
• 7+ years of sophisticated data privacy and security experience, preferably with an Am Law 200 or boutique law firm and/or in-house legal department
• Experience assessing data privacy compliance and developing comprehensive data privacy and security policies
• Experience addressing data breach or incidents and providing strategic advice and training on data security issues

Nice To Haves

• Insurance industry, CFIUS, and/or sanctions experience a plus

Responsibilities

• Provide strategic legal counsel on data privacy and protection matters across the organization.
• Lead and scale the company's privacy compliance program, ensuring alignment with business objectives and regulatory requirements.
• Develop and implement comprehensive data privacy and security policies and procedures.
• Oversee the protection of data collected by the company and ensure compliance with applicable laws and regulations.
• Draft, review, and negotiate privacy and security contractual clauses and data protection agreements.
• Monitor and assess changes in privacy laws and regulations, including CCPA, GLBA, GDPR, HIPAA, NYDFS, and others.
• Conduct privacy risk assessments and manage incident response for data breaches and cybersecurity events.
• Deliver ongoing training and education to employees on data privacy and security best practices.
• Collaborate with cybersecurity, IT, HR, and other cross-functional teams to ensure cohesive privacy strategies.
• Support privacy-related aspects of M&A activity, including due diligence and integration planning.
• Maintain strong relationships with internal stakeholders and external counsel to manage privacy-related legal matters.

Benefits

• Access to medical, dental, vision, life, disability, and AD&D insurance
• Tax-advantaged savings accounts
• 401(k) plan with company match
• Generous paid time off programs, including company holidays, vacation and sick days, new parent leave
• Eligible positions may also qualify for restricted stock units and/or a deferred compensation plan

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Industry: Insurance Carriers and Related Activities
• Education Level: Bachelor's degree
• Number of Employees: 1,001-5,000 employees