VP, Legal, Head of Privacy & Data Strategy

Warner Bros Discovery Inc•Silver Spring, MD

50d

About The Position

The Vice President, Legal, Privacy & Data Strategy will lead a talented team of privacy attorneys and professionals, advise senior business executives and technology stakeholders, and manage a range of issues involving consumer, employee, talent, and enterprise data operations. This candidate will work with cutting-edge business models in ad tech, news, sports, and streaming entertainment. Ideal candidates must demonstrate a comprehensive understanding of global privacy laws, expertise with technology, including privacy-enhancing technologies and artificial technology, and excellent management skills.

Requirements

Minimum 15 years legal experience in data privacy and data protection.
Experience working with data protection regulators and authorities in the US and Europe; including experience and skill in conducting and responding to privacy compliance inquiries, investigations, and complaints.
Experience working with senior executives, explaining complex legal concepts in easily understandable terms.
Experience supervising other privacy professionals.
Juris doctor
A collaborative, team-oriented approach.
Deep understanding of international privacy and data protection laws, regulations, and best practices, with a strong knowledge of employee privacy.
In-depth knowledge and experience in building, leading, maintaining, and documenting privacy programs, including a proven track record of privacy and data governance policy, process, and training development, implementation, and management.
Strong understanding of information systems and related security requirements, and knowledge and interest in emerging technologies.
Prior management experience with proven leadership skills and ability to supervise, motivate, and train others, including those who are not direct reports.
Ability to work unsupervised on most matters, escalating high risks where appropriate.
Strong legal judgment and excellent analytical skills, ability to understand and solve complex legal issues, ability to quickly and thoughtfully analyze issues of first impression, with a practical and creative problem-solving approach.
Capable of driving a team of stakeholders forward and keeping them on task, moving projects forward and delivering high quality, detail-oriented work.
Ability to negotiate and draft complex commercial and transactional agreements, preferably on data-driven deals.
Excellent written and verbal communication skills (legal, business, and technical).
Excellent analytical and strategic skills, strong attention to detail.
Ability to function well under pressure and to prioritize and reprioritize frequently.
Ability to handle and organize multiple simultaneous projects, stakeholders, and employees.

Nice To Haves

Technology, computer science, engineering background, and/or experience working closely with engineers and technology teams to define technical requirements or implement privacy program requirements is desirable.
Entertainment industry experience a plus
Degrees and/or certificates in Information Technology, Data Security, and/or Privacy/Data Protection are desirable, but not required.

Responsibilities

Global lead on privacy and data issues and initiatives related to consumers, workforce, and talent.
Work with senior executives and technical subject matter experts on complex and innovative ad sales, ad-tech, and digital marketing products, including advanced advertising initiatives.
Oversee and advise other Privacy Legal team members working on such projects globally.
Provide clear, practical, solution-oriented, and ethical legal advice to achieve and maintain privacy compliance while enabling business goals for data use and monetization.
Collaborate closely with senior executives across the company, including Senior Leadership, Legal, People & Culture, Risk Management, Internal Audit, Global Information & Content Security, Technology, Ad Sales, Tech, and businesses and brands to clearly communicate legal requirements and to align strategies and practices.
Coordinate and manage response and interactions with governmental authorities, works councils, external DPOs, consumer advocates, and other relevant entities on potential privacy and data protection inquiries, investigations, complaints, and actions.
Collaborate with legal and business stakeholders to address rights requests and potential claims from international, talent, and consumers.
Oversee management of data privacy registrations and compliance documentation across multiple jurisdictions.
Develop and maintain strategic and influential relationships with trade associations, and where appropriate government officials, to advocate for the company's interests in privacy and data protection policy, regulations, and standards, including by providing meaningful modifications and feedback.
Monitor developments and maintain internal documentation about global privacy laws, requirements, enforcement priorities, and industry standards and practices.
Conduct due diligence and collaborate with corporate teams on transactions with respect to privacy, data protection, and data use, including ownership, transfer, migration, retention, and processing.
Draft and negotiate complex business and transactional agreement terms to comply with privacy and data protection laws and to maintain consistency in privacy and data strategy across the company (including for master services, development, enterprise technology/SAAS, professional services, ad tech, post-production, data sharing, distribution, and other agreements). Draft and maintain template language and strategic fallback positions.
Work closely with Global Information & Content Security and other key stakeholders on alleged data incidents or breaches to analyze facts and legal requirements, manage response and notifications, provide mitigation recommendations, review and track documentation, and meaningfully participate in post-mortem and tabletop exercises.
Develop and manage a vendor program to facilitate vetting, auditing, classification, and proper configuration of vendor data transfer and use.
Collaborate with business and technology teams to design and establish efficient and legally compliant global data governance processes and documentation, including system and data inventories, data mapping and lineage, records of processing activities (ROPAs), data use cases, record and data retention.
Oversee the design, execution, and organization of Data Protection Impact Assessments (DPIAs) and legitimate interest assessments (LIAs), responses to individual rights requests, including data subject access requests (DSARs), updated privacy policies and notices, guidance materials, and awareness and training materials.
Support ongoing monitoring, auditing, reporting, and improvement of the privacy program.
Manage an international team of privacy attorneys and professionals.
Develop efficient, scalable strategies and processes to manage workloads.
Mentor and cultivate team members to enhance legal, organizational, and leadership skills.