Sr Legal Counsel VP (Vendor Contracts / Privacy)

Pathward, N.A.

47d•$104,000 - $174,000•Hybrid

About The Position

The Legal team at Pathward protects and strengthens the organization through legal expertise and strategic counsel. This role focuses on vendor contract management and privacy/data protection, supporting the enterprise’s third-party risk management and data governance programs. Pathward is seeking a highly-motivated and experienced attorney with broad-based legal, compliance, and regulatory experience. As Senior Legal Counsel, VP (Vendor Contracts / Privacy), you will provide legal support and advice on matters relating to legislative and regulatory developments, privacy implications regarding financial products and services, vendor contracts and licensing agreements, and all aspects of data protection, including privacy program support, cybersecurity, information technology and related compliance initiatives.

Requirements

Juris Doctor degree required, with an active membership to practice in at least one U.S. state.
7+ years of legal experience as a practicing attorney in big law firms, governmental agencies, and/or in-house legal/compliance departments.
Strong preference for demonstrated knowledge and experience in the financial services industry and with publicly traded companies.
Extensive experience in analyzing, interpreting, and applying state and federal regulations to vendor contracts and privacy programs.
Working knowledge of privacy related regulations associated with financial institutions. Experience with GDPR and CCPA a plus.
Experience with drafting complex technology and BaaS agreements.
Proficient with technology, including Microsoft Office 365 (Word, PowerPoint, Excel, Outlook, Teams).
Exemplary written and verbal communication skills.

Nice To Haves

Prior in-house experience at a bank, fintech company, or financial services organization, particularly in privacy or vendor management functions.
Familiarity with privacy and data protection principles and the ability to apply them practically across commercial relationships and product offerings.
Ability to assess and manage legal risk in third-party relationships, including evaluating vendor contracts and supporting enterprise risk management objectives.
Strong executive presence and demonstrated ability to build excellent relationships and influence stakeholders across business lines.
Intellectually curious and self-motivated, with a high level of personal energy, commitment, and ability to work independently.
Willingness and flexibility to respond to evolving privacy regulations, vendor risk requirements, and organizational needs.

Responsibilities

Provide legal support for data privacy, data protection, and cybersecurity programs including development and maintenance of procedures, training, and guidance.
Monitor and assess effectiveness of internal data protection policies and procedures, including assisting in data subject access requests and security incidents, and recommending amendments as applicable.
Provide legal advice to business line partners on data protection and privacy laws, compliance, and best practices regarding information technology and information security.
Deliver broad support for regulatory change management in the financial services industry by providing updates and guidance to the business on the impact of new and changing laws.
Engage in all aspects of vendor contract review including preparing, adapting, and negotiating data protection contractual clauses and processes in relation to client relationships, third-party vendor agreements and sub-processor agreements; ensure Pathward has appropriate language in place when acting as a data controller and/or data processor, as well as generally advising on agreements, how to mitigate potential risks, and confirm compliance with Company policies and legal regulations.
Engage as appropriate with key business stakeholders in various lines of business, including IT, Information Security, People & Culture, Treasury, etc.
Performs other legal support duties and responsibilities as required, assigned, or requested by the Deputy General Counsel and Chief Privacy Officer.