Senior Corporate Counsel - Data Privacy & Compliance

Lidl US•Arlington, MA

1d•$160,000 - $180,000•Hybrid

About The Position

The Senior Corporate Counsel - Data Privacy & Compliance (internal title: Senior Manager - Legal & Compliance) serves as the primary legal authority and strategic advisor on data governance, cybersecurity risk, privacy compliance, and emerging AI regulatory trends across digital, retail, finance, and corporate operations. Reporting directly to the General Counsel, this role establishes enterprise privacy policies, directs legal responses to cybersecurity incidents, oversees Data Privacy Impact Assessments (DPIAs), and steers the legal framework for Data Subject Access Requests (DSARs). The role liaises with supervisory authorities and external counsel and partners with cross-functional teams to integrate privacy-by-design and responsible AI governance into corporate systems and commercial initiatives. The position provides strategic regulatory advice, leads legal work during cybersecurity incidents, establishes DPIA governance, develops policies and training, oversees complex DSAR matters, and represents the company in regulatory matters. It also advises on commercial transactions, third-party risk, data processing agreements, cross-border transfer mechanisms, and vendor data security terms. The role directly supervises 2–4 team members and indirectly supervises 2–5. It is accountable for divisional cost planning and resource management, including analysis of cost-benefit impacts and macro-level resource management within its functional area. The work is primarily performed in a temperature-controlled office environment and involves prolonged periods sitting at a desk or computer terminal, use of standard office equipment, occasional bending and reaching, and lifting up to 25 pounds. Lidl offers a starting pay of $160,000, with potential to earn $180,000 in the future, along with employee discounts, health coverage, paid holidays and PTO, training plans, retirement benefits, insurance, and a well-being program.

Requirements

Juris Doctor (J.D.) from an accredited law school.
Active license to practice law in good standing in at least one U.S. jurisdiction.
At least 7 years of legal experience providing solutions-oriented advice in a reputable law firm or in-house legal department.
Progressive professional experience in corporate data privacy law, cybersecurity, regulatory compliance, and/or information governance management.
In-depth expertise in evolving U.S. federal and state privacy statutes and regulations, including CCPA/CPRA and VCDPA, global data protection frameworks such as GDPR, cross-border data transfer mechanisms, and regulatory enforcement trends.
Demonstrated capability in managing data breach incidents, handling regulatory inquiries, and conducting complex DPIAs across enterprise applications.
Strong legal judgment, analytical skills, issue spotting, organization, and attention to detail.
Outstanding communication, negotiation, and cross-functional leadership skills, including the ability to translate technical privacy rules into actionable business guidance.
Ability to demonstrate, understand, and continuously apply the company’s workplace values.

Nice To Haves

IAPP certification such as CIPP/US, CIPP/E, or CIPM is strongly preferred.

Responsibilities

Serve as the subject matter expert on evolving domestic and international data privacy and security laws, advising leadership on legal risk, legislative trends, and strategic compliance.
Direct legal strategy for cybersecurity incidents and potential data breaches, oversee privileged investigations, assess notification obligations under statutory deadlines, and manage regulatory reporting.
Establish the legal framework for DPIAs/PIAs and partner with Product, Engineering, and Business teams to integrate privacy-by-design into new products, digital services, and AI initiatives.
Draft, update, and operationalize enterprise-wide privacy and data security policies, governance standards, and employee compliance training programs.
Steer and oversee the legal framework of the DSAR program, advising on complex requests, statutory exceptions, and contentious data deletion or portability matters.
Represent the company in inquiries, audits, and proceedings before data protection authorities, and work with external counsel and industry associations on regulatory matters and data protection standards.
Advise on and negotiate complex Data Processing Agreements, cross-border transfer mechanisms, and vendor data security terms.
Supervise 2–4 team members directly and 2–5 indirectly.
Manage divisional cost planning and resources, including departmental controlling and evaluation of cost-benefit impacts and macro resource management.

Benefits

Starting pay of $160,000, with potential to earn $180,000 in the future.
10% employee-only discount on purchases made at Lidl stores.
Medical and prescription coverage.
Dental coverage.
Vision coverage.
Paid holidays and paid time off (PTO) for sickness or vacation.
Dedicated training plans.
401(k) plan with a 5% company match.
Voluntary term life and AD&D insurance.
Total Well-Being Program.
DailyPay, a voluntary benefit that allows employees access to their pay on their own schedule.