Vice President, Global Privacy Officer

Sirius XM•New York, NY

4d•Onsite

About The Position

SiriusXM is seeking a highly motivated attorney to join the legal department to work on cutting-edge privacy issues. This dual strategic and legal leadership role will be based in New York City and will define and execute SiriusXM’s global privacy vision across the collection of SiriusXM’s companies. As the senior subject matter expert in privacy, this role oversees how personal data is handled by business stakeholders and external parties across all lines of Sirius XM businesses and brands, including audio subscription services, connected vehicle services, marketing, data analytics, advertising sales and technologies, and engineering. The role also advises on the handling and processing of employee personal data for SiriusXM’s global workforce. The position reports to the SVP, Deputy General Counsel.

Requirements

Must be licensed and in good standing to practice law in New York.
A Juris Doctorate from a nationally recognized law school is required.
15 years of legal experience, with 8-10 years of direct privacy law experience, including an in-depth knowledge of global privacy laws and experience with building, implementing, and maintaining a global privacy program.
In-house experience preferred.
8-10 years of people leadership, with a track record of building, coaching, and scaling high-performing teams.
Expert knowledge of US, Canadian, European and UK privacy laws and practices.
Certified Information Privacy Professional-US (CIPP-US) certification required.
CIPP-EU, other certifications strongly preferred.
Significant experience managing a team of attorneys, paralegals, privacy professionals, vendors, and outside counsel in support of a corporate privacy function.
Excellent analytical and judgement skills.
Excellent written and verbal communications skills with the ability to translate complex legal and privacy concepts into actionable requirements for all levels of the organization.
Ability to act as a highly effective communicator regarding Company privacy requirements and data practices with vendors, partners, and regulators.
Excellent time management skills with the ability to prioritize and multitask and work under shifting deadlines in a fast-paced environment.
Ability to work independently and in a team environment.
Ability to maintain strong working relationships with demanding internal clients.
Ability to remain confident, mature and calm under fire, and to make decisions and pivot quickly and fluidly, thinking practically and be solution-oriented.
Experience advising on privacy and data security law and compliance efforts, including the organization and coordination of privacy assessments, corporate policies and processes.
Demonstrated knowledge and experience drafting and negotiating complex agreements relating to in-bound and out-bound agreements.
In-depth knowledge of cutting edge IT, web, mobile and ad-tech ecosystems and their privacy implications required.
Knowledge of automotive technology systems or smart and connected devices strongly preferred.
Direct experience advising internal stakeholders on privacy matters related to direct to consumer marketing and advertising as supply, demand, programmatic marketplace and ad tech intermediary.
Must have legal right to work in the U.S.

Nice To Haves

In-house experience preferred.
CIPP-EU, other certifications strongly preferred.
Knowledge of automotive technology systems or smart and connected devices strongly preferred.

Responsibilities

Define, execute and scale the Company’s overarching global privacy vision, governance architecture and privacy risk assessment framework.
Lead the Company's Privacy function within the Legal department in the design and execution of the Company’s privacy program, reviews of vendor and partner agreements, privacy impact and risk assessments, and consumer data rights management.
Work collaboratively with other members of the legal department, privacy operations consultants and Company personnel to devise, manage and implement privacy program priorities and operational standards for compliance with regulatory and contractual requirements while maximizing business goals and objectives.
Set legal and operational policies and standards for the collection, use, sharing, retention, and monetization of consumer personal data.
Prepare reports for the Chief Legal Officer, C-suite leaders and Company’s Board of Directors, as applicable, on the status of the Company’s privacy posture, emerging privacy trends in regulation and enforcement and related business impacts, and compliance metrics.
Lead the legal response to data security incidents and privacy breaches, serving as the privacy lead on the Incident Response Team and handling regulatory disclosures where required.
Develop, publish and maintain corporate transparency through privacy notices, cookie policies, consumer-facing disclosures and consumer rights submission flows.
Partner closely with engineering, product and marketing operations stakeholders and leads to embed Privacy by Design methodologies into product development lifecycles and data practices.
Provide advice and guidance to data science and analytics teams on privacy-compliant training and deployment of machine and large language learning models, personalization engines and other listener telemetry.
Guide marketing and lifecycle teams on compliant practices for personalization, direct marketing, paid marketing and first- and third-party data strategies.
Oversee privacy regulatory and contractual compliance in ad sales, direct and programmatic advertising, identity resolution, data clean rooms, and third-party data and ad tech integrations.
Lead team members in drafting and negotiations for data processing agreements, partner and vendor data sharing and licensing terms, and privacy audits for vendors, measurement partners, ad networks, data providers and other third-party data sources.
Support business stakeholders in ongoing monitoring for compliance with regard to third party agreements.
Define and oversee privacy frameworks for collection, use and protection of employee, contractor and candidate personal data worldwide, including in employee operations, cross-border transfers, use of AI in employment decisions, and workplace monitoring.
Maintain current knowledge of applicable federal, state and foreign privacy laws and frameworks (e.g., CCPA, CA Delete Act, PIPEDA, GDPR, LGPD), maintain lawful cross-border transfer mechanisms, and monitor advancements in information privacy technologies to ensure organizational adaptation and compliance.
Serve as the primary point of contact for data protection authorities, regulatory inquiries, and industry coalitions.
Oversee privacy training, information sessions and other communications to increase employee understanding of company privacy policies, data handling practices and procedures and legal obligations.
Work with business teams and senior management to ensure awareness of best practices on privacy issues.
Develop and assist in the implementation of procedures for vetting and auditing vendors for compliance with the Company's privacy policies and contractual requirements.
Represent the Privacy function in senior leadership discussions, vendor/customer meetings, and cross-functional forums where privacy requirements, tradeoffs, and risks must be resolved.
Drive measurable improvements in privacy program maturity, incident readiness, vendor governance, compliant product launches, and privacy risk reduction.
Manage privacy program resourcing, vendor support, and outside counsel engagement for privacy matters, as applicable.
Lead, coach, and develop high-performing teams to foster career growth and professional development.
Provide constructive feedback, conduct performance reviews, and guide team members in setting and achieving goals.
Build and maintain an inclusive, collaborative team culture that encourages innovation and accountability.
Provide hands-on guidance to directors, senior managers, attorneys, paralegals, and privacy professionals to ensure the function operates efficiently and aligns with business goals.