Legal & Compliance - Cyber Security & Data Privacy and Protection, SVP

Blackstone is the world’s largest alternative asset manager. We seek to create positive economic impact and long-term value for our investors, the companies we invest in, and the communities in which we work. We do this by using extraordinary people and flexible capital to help companies solve problems. Our $1.1 trillion in assets under management include investment vehicles focused on private equity, real estate, public debt and equity, infrastructure, life sciences, growth equity, opportunistic, non-investment grade credit, real assets and secondary funds, all on a global basis. Further information is available at www.blackstone.com. Follow @blackstone on LinkedIn, Twitter, and Instagram.
 

The candidate will join the Data Policy and Strategy Office in Blackstone’s Legal & Compliance department to support its cybersecurity, privacy and data protection programs, and to address regulatory and legal issues arising from Blackstone’s processing of personal and confidential data, including data protection, data loss, information access, and incident management. As experienced Privacy, Cybersecurity, & Data Protection Counsel for Blackstone, you will be responsible for providing advice and driving compliance efforts with respect to global privacy, cybersecurity, and data protection laws in all global jurisdictions. You will be a part of a team whose task it is to verify our businesses are in compliance with privacy, cybersecurity, and data protection regulations. You will be a partner to the business, leading initiatives, providing consultative advice, and acting as a point of escalation for privacy and data protection matters. The role will focus on assisting team members across multiple business groups and supporting compliance programs associated with the use of data in the support of its business operations and within its investment portfolio.

Primary job responsibilities include:

• Provide guidance on and drive compliance efforts relating to global privacy and data security regulations and standards.

• Track and research global regulatory developments relating to new and pending laws that impact Blackstone's privacy, cybersecurity and data protection program; translate that into practical, effective advice; work with business leader to address regulatory changes and lead compliance efforts relating to these laws.

• Implement and update privacy, cybersecurity, and data protection related policies, procedures, best practices, and guidelines.

• Administer and resolve privacy and data protection questions and issues that arise in business operations and commercial relationships.

• Review and negotiate privacy and data protection requirements in contracts and licenses, other submissions and reporting documents, including the review, negotiation and management of Standard Contractual Clauses and Intracompany Data Transfer agreements.

• Counsel on information technology development, acquisition and implementation and data architecture to ensure compliance with global privacy and data protection laws such as data localization requirements.

• Counsel on regulated and complex uses of personal data including for digital marketing, algorithmic decision making and customer acquisition and retention.

• Advise on privacy by design initiatives and privacy governance and strategy decision-making around protecting our investor, employee and other personal and confidential data entrusted to the firm and to Blackstone’s technology partners.

• Oversee legal and compliance aspects of insider risk and Red Flag programs.

• Counsel on privacy and security incident preparedness and management, including participating in tabletop exercises and any data-related incidents or regulatory inquiries.

• Provide legal and compliance support and advice regarding data models, data repositories, transfer and distribution of data products and implementation of automated or algorithmic data processing.

• Assist with and support other day-to-day legal and compliance matters and processes associated with the privacy and data protection programs as needed.

• Prepare, coordinate, and deliver legal and compliance training regarding privacy, data protection, information risk management and associated activitie