About the Role
The head of data privacy or chief data privacy officer will be responsible for all legal aspects of data privacy, information security, and consumer marketing and subscriptions-related compliance across the company. This role involves managing the Company's privacy compliance function and working closely with senior executives and operational leads across various departments. The position includes managing a team.
Responsibilities
- Advise internal clients on risks and operational controls for the development, collection, use, transfer, and governance of personal data.
- Advise key business stakeholders on data governance, cybersecurity, marketing, and subscriptions compliance efforts.
- Drive improvements in privacy program maturity, incident readiness, vendor governance, compliant product launches, and privacy risk reduction.
- Manage privacy program resourcing, vendor support, and outside counsel engagement.
- Draft and/or update privacy program-related policies, standards, terms of use, terms of sale, and consumer-facing policies.
- Supervise and oversee the preparation and updating of Data Protection Impact Assessments and other risk assessment activities.
- Conduct comprehensive business risk assessments and develop/implement risk mitigation plans.
- Advise on privacy regulatory and contractual compliance in marketing, ad sales, advertising, identity resolution, data clean rooms, and third-party data and ad tech integrations.
- Review, draft, and negotiate data protection agreements and security exhibits.
- Advise on consumer protection, subscriptions, and marketing laws, regulations, and best practices.
- Provide product counseling on privacy, cybersecurity, and consumer compliance.
- Track and counsel clients on legal US and international developments in data privacy, cybersecurity, and consumer marketing and subscription compliance.
- Serve as legal lead for security incident response, working closely with the Chief Information Security Officer.
- Draft and update information security policies and procedures.
- Provide advice and guidance to data science and analytics teams on privacy-compliant deployment of machine learning models and personalization.
- Oversee and develop company-wide training strategy and execution for areas of coverage.
- Serve as point of contact for data protection authorities, regulatory inquiries, and industry groups.
- Demonstrate excellent judgment and professional integrity.
- Handle high-volume workload efficiently.
- Demonstrate support and understanding of journalistic independence and commitment to the company's mission.
Requirements
- Juris Doctor required and must be a member of the New York Bar.
- 15+ years of experience in US and international data privacy and protection.
- Experience negotiating data privacy-related agreements.
- Experience building, implementing, and maintaining a global privacy program.
- Experience supporting cybersecurity.
- 5+ years of experience managing people.
- Proven experience effectively managing cross-functional relationships and competing priorities.
- 5+ years of previous in-house experience.
- Experience advising on online safety laws and sensitive data privacy regulations.
- Experience advising or managing legal professionals who advise on a wide variety of consumer-related issues.
- 5+ years in-house experience at a tech platform, media company, and/or subscription-first company.
Skills
- Data privacy
- Information security
- Consumer marketing compliance
- Subscriptions compliance
- Cybersecurity
- Data governance
- Risk assessment
- Policy drafting
- Contract negotiation
- Regulatory compliance
- Online safety laws
- Sensitive data privacy regulations
- Machine learning model deployment
- Personalization
Location
- New York City headquarters
Work Type
- Hybrid
- Full-time
Experience Level
- 15+ years of experience
- 5+ years of management experience
Education Level
- Juris Doctor
Salary/Compensations
- $275,000—$315,000 USD
About the Company
- The New York Times Company is committed to being the world’s best source of independent, reliable, and quality journalism.
- The company seeks the truth and helps people understand the world through independent journalism.
- The company has a world-renowned newsroom with journalists reporting from nearly 160 countries.
- The company focuses on reader experience across print, audio, digital, and app platforms.
- The business strategy centers on creating journalism that is worth paying for.
Equal Opportunity
- The New York Times Company is an Equal Opportunity Employer and does not discriminate on the basis of an individual's sex, age, race, color, creed, national origin, alienage, religion, marital status, pregnancy, sexual orientation or affectional preference, gender identity and expression, disability, genetic trait or predisposition, carrier status, citizenship, veteran or military status and other personal characteristics protected by law.
- All applications will receive consideration for employment without regard to legally protected characteristics.
- The New York Times Company will provide reasonable accommodations as required by applicable federal, state, and/or local laws.
