Senior Director, Legal - Global Privacy & Data Counsel

PlayStation Global•San Mateo, CA

6d•$302,400 - $453,600•Hybrid

About The Position

Sony Interactive Entertainment (SIE), the company behind the PlayStation brand and a subsidiary of Sony Group Corporation, is a technology and entertainment company delivering hardware and network services to more than 100 million people. The Senior Director, Legal - Global Privacy & Data Counsel will lead SIE’s Global Legal Privacy program and advance the function across a data-driven technology and entertainment business. The role develops, implements, and maintains privacy policies, procedures, and practices that reflect industry best practices, comply with applicable data protection laws, and support SIE’s business objectives. The position is based in San Mateo, California, or London, England, with a hybrid requirement of at least two days per week in the designated office. Full relocation assistance is available for qualified candidates. The role leads a multidisciplinary team spanning legal, operations, compliance, and data governance; designs and evolves SIE’s privacy program; and communicates the company’s privacy and data-husbandry vision, strategy, and objectives to stakeholders. It works across the organization to support regulatory compliance, privacy by design in products and services, transparent policies and notices, employee awareness, vendor privacy reviews, scalable privacy impact assessments, and effective privacy incident response. The role reports on program status to executive leadership and the board of directors and serves as a point of contact for privacy inquiries from regulators and customers. The role offers a base pay range of $302,400–$453,600 USD. It is eligible for SIE’s benefits package, including medical, dental and vision coverage, matching 401(k), paid time off, a wellness program, and employee discounts on Sony products. The role may also be eligible for a bonus package.

Requirements

Juris Doctor degree.
Bachelor’s or advanced degree in computer science, information technology, or a related field.
20 or more years of legal experience.
10 or more years of proven experience in a senior privacy leadership role, preferably as a Chief Privacy Officer or Privacy Officer, within a data-driven technology company or relevant industry.
In-depth knowledge of global privacy laws and regulations, including GDPR, CCPA, and other regional frameworks.
Demonstrated ability to design and implement comprehensive privacy programs aligned with best practices, laws, regulations, and data-use requirements typical of a company like SIE.
Experience building an incident response process in partnership with a CISO or similar function, and managing privacy incidents.
Experience conducting privacy impact assessments and building scalable assessment processes.
Excellent communication and interpersonal skills, including the ability to interact effectively with stakeholders at all organizational levels.
Strong leadership qualities and the ability to influence and drive change collaboratively.

Nice To Haves

An advanced degree is a plus.
Broad knowledge of emerging requirements in the APAC region is a strong plus.
Privacy-related certifications such as CIPP, CIPM, CIPT, or other relevant certifications are highly desirable.

Responsibilities

Lead and develop a team of professionals spanning legal, operations, compliance, and data governance.
Design, implement, and evolve a privacy program suited to SIE’s data-driven business.
Communicate SIE’s vision, strategy, and objectives for data privacy and data stewardship to stakeholders.
Monitor global privacy laws and regulations and ensure company policies and practices remain compliant.
Advocate for privacy-by-design principles and integrate privacy considerations into new products, services, and technologies in collaboration with product counselors, product managers, business function leaders, and the ESG team.
Create and review privacy policies, notices, consent forms, and related documentation, and collaborate with Legal, Compliance, and other teams to communicate them internally and to customers.
Conduct privacy training for employees and management and promote awareness of privacy responsibilities and best practices.
Develop and evolve processes for assessing vendors and third-party partners, including ensuring data processing agreements and contracts meet privacy and SIE Information Security requirements.
Oversee privacy impact assessments to identify and mitigate risks associated with data processing.
Develop and maintain a privacy-breach incident response plan and coordinate with the Incident Response team to manage and mitigate privacy incidents and associated risks.
Report regularly on the privacy program to executive leadership and the board of directors.
Serve as a point of contact for privacy-related inquiries from regulators and customers.