Senior Counsel, Privacy, AI & Data Responsibility

Our Purpose

Mastercard powers economies and empowers people in 200+ countries and territories worldwide. Together with our customers, we’re helping build a sustainable economy where everyone can prosper. We support a wide range of digital payments choices, making transactions secure, simple, smart and accessible. Our technology and innovation, partnerships and networks combine to deliver a unique set of products and services that help people, businesses and governments realize their greatest potential.

Title and Summary

Senior Counsel, Privacy, AI & Data Responsibility

Overview
Mastercard is committed to balancing innovation while protecting individual privacy and has embraced privacy and data protection as core to the successful execution of its business strategy. As part of that commitment Mastercard has established a world-class privacy program and is currently adding talent to its global team.
The Senior Counsel, Privacy & Data Protection will support Consumer Solutions within Mastercard’s core business, with a particular focus on the global Optimization product team. As a member of the global Privacy, AI, and Data Responsibility (“PAIR”) Team, the Senior Counsel will join a team of other PAIR attorneys enabling business teams through Mastercard’s Privacy by Design approach and reinforcing Mastercard’s leadership in responsible, data-driven innovation.
The Senior Counsel position will report to the Senior Managing Counsel, Privacy & Data Protection, and function as a privacy, AI, and data responsibility subject matter expert within Mastercard’s Law Department. The role is for our global headquarters in Purchase, NY.
Role
The Senior Counsel, Privacy & Data Protection will provide global PAIR support for Consumer Solutions, with a primary focus on supporting the global Optimization product team, whose mission is to empower Mastercard to optimize and help customers realize the full potential of the Mastercard solutions. The Optimization team works alongside the product and engineering teams focused on strategy, governance, data & analytics, optimization, commercialization, distribution, and fintechs. The selected candidate must have the ability to understand complex privacy and data protection laws and the operational and technical requirements behind compliance with these laws. The Senior Counsel will assist in developing creative solutions to support commercial objectives while ensuring compliance with privacy and data protection laws globally. Activities include:
• Support Mastercard’s operationalization of compliance with privacy and data related laws – including, for example, CCPA/CPRA, GLBA, PIPEDA, GDPR, GDPL and other current and forthcoming privacy laws around the globe.
• Identify legal, business, and technical infrastructure requirements and controls to enable privacy compliance adopting the Privacy by Design process; work with legal, business, technical teams to assist implementation.
• Monitor for emerging regulatory developments and translate legal terms into business requirements.
• Define processes, workflows, and training material for support service personnel to facilitate legal compliance with applicable privacy and data protection laws and regulations.
• Assist the team to record data protection impact assessments where required, and to identify and implement privacy controls and safeguards to mitigate risks.
• Draft and negotiate data processing terms and agreements with vendors and customers, including in relation to international data transfers, consent and notice representations and other data-related contract provisions.
• Draft privacy notices and review consumer-facing material, including marketing and communications campaigns, for compliance with applicable privacy and data protection requirements.
• Maintain records of processing for all personal data processing activities as required under applicable data protection laws, regulations, and standards.
• Engage with the organization to assist in training employees on privacy and data protection requirements, handle privacy-related queries and raise employee awareness about privacy and data protection developments.

All About You
A little about our ideal candidate:
• JD from an accredited law school and admitted to at least one bar in the United States.
• Any additional qualifications (e.g., Master of Laws degree) considered an asset.
• Strong experience in privacy and data protection law. IAPP certification an asset but not sufficient without relevant experience.
• Oral and written fluency, including legal drafting and presentation skills.
• Proficiency in providing privacy subject matter expertise to fast-moving product business and legal teams throughout the product lifecycle (ideation