Senior Data Protection Counsel

<p>Intercom was founded in 2011 to change the standard of customer service online. Our AI-first customer service platform is a totally new way to deliver customer service and is designed to transform the way businesses interact with their customers through AI. We all know that customer service on the internet sucks. It’s slow and impersonal. We help businesses provide instant and exceptional service to their customers and maximize their support agents’ productivity, efficiency, and performance—all through our single AI system. More than 25,000 businesses use Intercom to send millions of messages to millions of customers each month.Intercom has been a long-standing product leader and cultural icon in the technology and startup worlds for more than a decade. We set the pace for our industry and live by our values that allow us to push boundaries, build with speed and intensity, and deliver incredible value to our customers.Join us on our mission to redefine customer service and make internet business personal.</p><h2>What's the opportunity? 🤔</h2> <p>Intercom’s Legal team is seeking a dedicated counsel to lead the company’s program on data protection and manage legal matters involving privacy and cybersecurity, as well as help support other Compliance and Product-led initiatives. Reporting to the Sr. Director of Compliance &amp; DPO, this role will advise and partner with our engineering, product, security, sales, marketing and other teams throughout the organization to manage legal risk and compliance with global privacy and cybersecurity laws and regulations. You will develop and effectuate strategies and initiatives that focus on building a scalable privacy and security program, as well as educate and train key stakeholders on prioritizing data protection as a core value for Intercom.  Furthermore, you will help develop and evolve other legal and regulatory compliance initiatives involving subjects such as artificial intelligence.</p> <h2>What will I be doing? 🚀</h2> <ul> <li>Provide a wide range of subject matter expertise and resource on privacy, security and data protection</li> <li>Work with teams worldwide on various privacy, security and compliance initiatives </li> <li>Partner very closely with your colleagues on Intercom’s legal team on a number of cross functional projects with privacy and regulatory compliance implications</li> <li>Draft external notices and disclosures, and manage/update data protection and privacy related  internal and external policies and procedures to ensure compliance with global laws and regulations related to data protection</li> <li>Provide guidance and interpretation on legal requirements to the engineering and product teams with respect to existing and new product features and functionality for privacy-by-design and security-by-design initiatives </li> <li>Respond to customer, vendor and employee questions about their individual data rights and Intercom’s processing activities as well as Intercom’s data management practices and policies</li> <li>Draft and manage data protection impact assessments</li> <li>Own data-related contractual templates, such as Data Processing Addendum, Business Associate Agreement, Information Security Addendum, etc. and train Commercial Legal team on negotiation playbook and regulatory updates</li> <li>Analyze privacy law developments and provide analysis and guidance for implementation into business processes</li> <li>Counsel and advise commercial teams and business partners on data protection related provisions in contracts</li> <li>Keep up with industry guidelines and best practices on data management and how they apply to Intercom’s offerings</li> <li>Support projects in other key data protection-related compliance areas such as our Code of Conduct, new product analyses and initiatives, risk management, cyber insurance and security incidents.</li> </ul> <h2>What skills do I need? 📖</h2> <ul> <li>5-10 years relevant experience as an attorney with a law firm or in-house legal department advising a multinational SaaS company on global data privacy regulation and laws</li> <li>Deep experience with global privacy regulations, which include GDPR, the ePrivacy Directive and CCPA-CPRA.  Working understanding of Australian Privacy Act, HIPAA, PIPEDA and desire to learn LGPD and upcoming regulations </li> <li>Working understanding of the EU AI Act and other developing regulatory laws associated with AI data governance</li> <li>Foundational knowledge of key security programs such as SOC2, ISO and HIPAA</li> <li>CIPP/E or CIPP/US certification</li> <li>A level of comfort in influencing and educating an organization on the importance of privacy and implementation of privacy initiatives, and capable of gaining respect of senior leaders in the organization </li> <li>An ability to multi-task which includes handling a variety of legal issues simultaneously </li> <li>Attention to detail, a sense of passion to support Intercom’s privacy initiatives and t