Legal Director, Data Protection & Privacy

Arrow Electronics•Alpharetta, GA

15d•Hybrid

About The Position

Arrow Electronics is a global provider of products, services, and solutions to industrial and commercial users of electronic components and enterprise computing solutions. Arrow Electronics guides innovation forward for over 220,000 leading technology manufacturers and service providers. With 2024 sales of $27.9 billion, Arrow develops technology solutions that improve business and daily life. The company maintains 228 locations worldwide with over 85 countries served. A Fortune 154 company with 21,500 employees worldwide, Arrow brings technology solutions to a breadth of markets, including telecommunications, information systems, transportation, medical, industrial, and consumer electronics. Arrow provides specialized services and expertise across the entire product lifecycle. Arrow does this by connecting customers to the right technology at the right place, time, and price. Arrow provides extraordinary value to customers and suppliers - the best technology companies in the world - and connects them through the company's industry-leading services. We are seeking a seasoned and strategic Director, Data Protection & Privacy Counsel to lead our global legal functions for Data Protection, AI, Privacy and Cybersecurity. This role will be instrumental in shaping and executing our data protection strategy, ensuring compliance with evolving AI, data protection and global privacy laws, and enabling innovation across our products and services. You will serve as a trusted advisor to senior leadership and collaborate cross-functionally with product, engineering, security, and compliance teams.

Requirements

J.D. from an accredited law school and active membership in at least one U.S. state bar (CO bar or ability for reciprocity preferred).
7-10 years of legal experience, including in-house and/or law firm roles focused on privacy and data protection.
CIPP/E, CIPP/US, CIPM, or similar certification required.
Deep knowledge of European and U.S. and other international privacy laws and frameworks.
Experience advising on privacy issues in SaaS or consumer tech industries.
Strong contract negotiation and drafting skills.
Demonstrated ability to lead cross-functional initiatives and manage complex legal issues.
Excellent judgment, communication skills, and business acumen.
Ability to work independently and collaboratively in a fast-paced environment.

Responsibilities

Lead the development, implementation, and oversight of the company’s global privacy and data governance programing.
Provide expert legal advice on privacy, data protection, AI, cybersecurity, and emerging technologies.
Serve as company Data Protection Officer in requisite jurisdictions as needed.
Monitor and interpret global privacy laws (e.g., GDPR, CCPA/CPRA, PIPL, HIPAA, ePrivacy Directive) and advise on business impact.
Draft, negotiate, and maintain data protection agreements, privacy terms, and contractual provisions.
Guide privacy-by-design and data governance principles across product development and business operations.
Oversee privacy impact assessments (PIAs), data protection impact assessments (DPIAs), and incident response protocols. Key member of cyber incident response team.
Develop and deliver privacy training and awareness programs for internal stakeholders.
Represent the company in regulatory matters, audits, and external counsel engagements.
Collaborate with compliance, security, and risk teams to align privacy practices with business goals.
Lead and mentor a team of privacy professionals and legal staff.