Vice President, Legal and Data Protection

Strada Education Foundation•Washington, DC

3d•$235,000 - $258,000

About The Position

CredLens is seeking a Vice President, Legal and Data Protection to join its rapidly growing nonprofit. This role is for candidates who are either established in-house counsel or seasoned law firm practitioners with strong execution experience, motivated to take on a leadership-oriented in-house role. The ideal candidate will demonstrate a proven ability to execute quickly, accurately, and thoughtfully; bring strong negotiation skills across complex commercial agreements; and drive execution of commercial agreements at significant scale while maintaining the integrity and reliability of form agreement frameworks. The candidate should have the capacity to both execute quickly and at scale, combined with the ability to step back and provide strategic guidance. Comfort providing decision-ready advice supported by data and risk analysis, interest in growing with CredLens over a multi-year horizon, and a deep willingness to learn the CredLens business, policy, and ecosystem dynamics are essential. CredLens is an affiliate of Strada, serving as its parent organization and major funder. This position reports directly to the CEO of CredLens and serves as a member of the CredLens leadership team, while also maintaining a critical dotted-line reporting relationship to the General Counsel of Strada. In that capacity, the VP will partner closely with the Strada legal team on shared corporate, governance, and compliance matters, ensuring alignment with Strada-wide standards and policies. Non-degree credentials are reshaping how people move from learning to earning, but growth has outpaced clarity. Thousands of offerings, uneven definitions, and fragmented outcomes data make it nearly impossible to distinguish impact from activity. CredLens is designed to address this need as a source of high-quality outcomes data and insights for non-degree credentials, connecting issuer-verified credential records to real-world employment, earnings, and education outcomes. CredLens has been operating for two years and is generating insights for a growing number of clients.

Requirements

Licensed attorney with a minimum of 8 years of legal experience as in-house counsel, a law firm practitioner, or a combination of the two.
At least 4 years of experience handling data privacy, information security and compliance matters.
At least 4 years of experience in drafting, negotiating, and managing complex commercial contracts.
Deep understanding of privacy laws, including GDPR, CCPA, FERPA, and other relevant regulations.
Experience advising senior executives on legal and regulatory matters.
Excellent written and verbal communication skills.
Strategic thinking: Ability to think strategically about legal and compliance issues and provide guidance that balances risk with organizational goals.
Problem-solving: Strong problem-solving skills and the ability to navigate complex legal environments.
Attention to detail: High level of accuracy and attention to detail in legal documentation and compliance matters.
Interpersonal skills: Strong interpersonal and relationship-building skills, with the ability to work effectively across functions and at all organizational levels.
Project management: Excellent organizational and project management abilities.
Ethics and integrity: Commitment to ethical practices and integrity in all dealings.

Nice To Haves

Experience with companies or organizations that manage sensitive personal data at scale.
Prior in-house counsel experience.
Familiarity with education data, workforce data, and/or the non-degree credentialing ecosystem.
Experience with intellectual property matters including intellectual property protection, prosecution and enforcement of intellectual property rights.
Demonstrated ability to work within a matrixed organization, including engaging and keeping a corporate legal department duly informed and consulting the corporate legal department as appropriate.

Responsibilities

Ensure the protection and privacy of sensitive personal information at CredLens, including data submitted by credential issuers and training providers.
Collaborate with the CTO and information security team to implement technical and organizational measures for securing sensitive data.
Working with the CISO, ensure compliance with all applicable privacy laws and regulations at CredLens, including the ongoing implementation and management of a comprehensive privacy policy and data governance framework across the organization.
Draft, review, and negotiate all agreements, including for outcomes data sources, issuer customers, and other strategic partnerships, ensuring continued compliance with applicable laws and regulations.
With the CTO and CISO, establish procedures for managing and complying with all agreement terms with multiple sources of outcomes data and numerous issuers, ensuring data are only used for authorized use cases and all data are de-identified or expunged in accordance with agreement terms.
Advise the CEO and leadership team on all data privacy and security-related compliance, legal, and regulatory issues.
Monitor changes in privacy and information security laws and regulations and advise on evolving compliance expectations.
Act as a full member of the CredLens leadership team and work closely with the Strada legal team to ensure compliance with Strada policies, including those governing employment, corporate compliance and governance, and applicable laws and regulations such as non-profit tax regulations and employment and labor laws.
Work in collaboration with team members to identify, report, assess, and mitigate legal risks associated with the organization’s operations through insurance coverage, contract provisions limiting or transferring risk, or use of other strategies.
Uphold the highest ethical standards and promote a culture of compliance within CredLens.