Senior Counsel - Privacy & Data Risk

As part of the Privacy Office within the Office of General Counsel, this attorney will provide legal and regulatory compliance operations advice to the Company on privacy and data governance to all business functions and brands of Volkswagen Group of America, Inc., where the Company is facing novel and cutting-edge privacy issues relating to connected cars, automated driving, big data analytics, and cross-border data access and transfers.  This attorney will work closely with the relevant business areas and affiliated companies to advise regarding U.S. legal requirements and risk, and review and advise on contracts.

In addition, this position will serve a core role helping manage the operational activities of the Privacy Office at VWGoA, working closely with attorneys, privacy compliance specialists, IT, Information Security, and business units, to support the team’s: execution of strategic plans, policies, and procedures, training of legal department and company employees, management and integration of technology purchases, and engagement, retention and management of vendors.

Oversees legal advice to the Company and provides day-to-day counsel on matters and projects related to areas of expertise (90%)

·       Serves as legal expert and provides strategic direction as well as day-to-day counsel, review and commentary to executives, business colleagues, and IT organization regarding the requirements of federal, state, and international privacy and data security statutes and regulations, controls, and best practices for Volkswagen of America, Audi of America, and the other Volkswagen Group of America brands, in product development, sales and marketing, human resources, information technology, and other core business functions.

·       Assist in developing Privacy-By-Design strategies for digital marketing, mobile applications, business analytics, and connected car technologies.

·       Assist in developing and managing Company’s formal privacy program, including development and management of governance policies and procedures, compliance materials, and employee training

·       Conduct privacy risk assessments on individual business use cases and overall business risk areas

·       Draft, review, and negotiate privacy and cybersecurity terms in vendor and affiliate contracts.

·       Manage data governance policies, keeping them current in light of recent legal developments

·       Support privacy program operations, including policy and procedure development, training, audits, management and integration of technology purchases, and engagement, retention and management of vendors.

·       Assist with legal advice around artificial intelligence and data governance initiatives with internal stakeholders.

·       Assist with cybersecurity legal advice, and incident and breach response as needed

·       Coordinate with respons