Director, Privacy Counsel

It’s not just about your career or job title… It’s about who you are and the impact you will make on the world. Because whether it’s for each other or our customers, we put People First. When our people come together, we Expand the Possible and continuously look for ways to improve what we create and how we do it. If you are constantly striving to grow, you’re in good company. We are revolutionizing the way the world moves for future generations, and we want someone who is ready to move with us.

The desired location for this position is in our Pittsburgh, PA HQ office.

Who will you be working with?

Reporting to the VP of Legal, Compliance & Regulatory, the Director of Privacy Counsel will oversee all aspects of privacy and cybersecurity compliance throughout the organization globally.

How will you make a difference?

As a Legal/Compliance team member, you will be responsible for supporting various company-wide projects and initiatives addressing privacy and regulatory compliance risks. Successful candidates should have a good understanding of data protection principles, knowledge of privacy regulations, and experience in project management. The successful candidate will possess the ability to work independently and manage deadlines; have strong research, communication, and analytical skills; be thoughtful and strategic; enjoy working in a fast-paced environment; and advance a positive spirit of solution-oriented partnership and collaboration with internal clients, internal legal colleagues, and outside counsel.

What do we want to know about you?

• Juris Doctor (JD) degree from an accredited law school.
• Admitted to the state bar and in good standing.
• 3+ years of experience practicing law, with a focus on data privacy and cybersecurity.
• Privacy law experience in a global manufacturing corporation (significant plus).
• Strong computer proficiency, particularly in Microsoft Office Suite (Excel, PowerPoint, Word).

What will your typical day look like?

• Develop and implement data privacy policies and procedures in accordance with relevant laws and regulations and industry best practices.
• Collaborate with cross-functional teams, including HR, IT, and legal, to ensure a unified approach to data privacy.
• Provide legal support to business units on all aspects of contract law with particular emphasis on privacy and cyber security requirements, to negotiate data processing agreements, and other privacy-related agreements.
• Conduct data privacy impact assessments (DPIA) and regularly review and update risk assessments to identify and mitigate data protection risks.
• Monitor relevant privacy and data protection laws and enforcement activities to ensure ongoing compliance, track emerging risks and assist with policy creation and other program materials.
• Serve as a point of contact for data privacy inquiries and requests from employees and external parties.
• Collaborate with third-party vendors to ensure their compliance with data privacy regulations.
• Educate and train employees on data privacy, information security, cybersecurity risks, and data protection principles and practices, in order to foster a culture of security and privacy within Wabtec.
• Advise business units in assessing and responding to data privacy risks related to relevant functions.
• Work with IT to develop and implement an information security framework for computer networks and data, including cybersecurity measures and response protocols.
• Lead the Legal response to data breaches, including investigation, mitigation, notification, and remediation.

General Legal/Compliance Responsibilities:

• Conduct legal research, develop, support, provide legal advice on, and implement compliance policies and procedures, ensuring they align with local and international laws and regulations.
• Provide legal advice and support enterprise-wide training initiatives, to include providing training and guidance to company employees on compliance policies and procedures, fostering a culture of integrity and ethical conduct.
• Conduct ethics and compliance investigations, develop recommendations, and support resolutions under privilege.
• Provide legal advice to and work closely with various departments, including ESG, HR, Finance, Procurement, Supply Chain, and Operations, to ensure comprehensive compliance coverage.
• Keep abreast of legislative changes that may impact the company’s regulatory posture and compliance programs, provide legal analysis and guidance, and adapt strategies accordingly.
<