Vice President, Associate General Counsel, Data & Technology

Let’s be unstoppable together!

At Circana, we are fueled by our passion for continuous learning and growth, we seek and share feedback freely, and we celebrate victories both big and small in an environment that is flexible and accommodating to our work and personal lives. We have a global commitment to diversity, equity, and inclusion as we believe in the undeniable strength that diversity brings to our business, employees, clients, and communities. With us, you can always bring your full self to work. Join our inclusive, committed team to be a challenger, own outcomes, and stay curious together. Circana is proud to be Certified™ by Great Place To Work®. This prestigious award is based entirely on what current employees say about their experience working at Circana.

Learn more at www.circana.com.

What will you be doing?

The Vice President, Associate General Counsel, Data and Technology, has global responsibilities covering a range of technology legal topics, including (i) advising on engagements involving technology delivery; (ii) reviewing new software and technology assets in development; (iii) acting as counsel to our internal and client-facing teams responsible for technology products and services; (iv) analyzing, advising, and preparing for regulatory changes in artificial intelligence, data localization, cyber security, and technology more broadly; (v) advising the information security team; and (vii) supporting our commercial lawyers in their work involving technology.

Your role will focus primarily on our internal technology systems and products - providing counsel for new, developing, and established products and/or tech systems and advising on legal topics related to data and technology, including and beyond the scope of personal data. Over time your role may involve other aspects of our team’s work. You will advise our IT teams on technology systems and products that we build or implement to support the work of Circana. You will advise on complex, large scale data projects and programs. You will monitor regulatory proposals and changes, developing strategies for implementing regulatory requirements and educating our teams outside of legal on regulatory developments in their space.

Job Responsibilities

Enterprise-wide leadership:

• Report to Circana’s Chief Ethics & Compliance Officer and serve as member of Compliance Leadership Team.
• Partner closely with our IT teams, including on all things data and data flows, risk-appropriate guidance, policies and procedures, compliance offerings, risk management, and other areas of shared interest and responsibility.
• Partner closely with commercial legal to ensure legal IT approach matches legal commercial approach and that data expertise is leveraged, integrated, and organized effectively.
• Lead and operationalize initiatives relating to identity governance, insider risk, data loss prevention, eDiscovery, and records retention. Mature controls enterprise-wide for vendors that process Circana's data.

Subject matter expertise:

• Serve as legal subject matter expert for data, technology, cyber security, and AI matters.
• Assess and identify potential legal and regulatory risk as well as identify programmatic areas for which the company can assess and strengthen system of IT compliance controls.
• Comprehensive experience in project management; data privacy and security laws, including laws in the U.S., EU and UK, Australia, Brazil, China, Japan, and South Korea; preparing for, investigating and managing incidents; and regulator interactions.

Data:

• Build out enterprise information management and data governance services (data quality, classification and retention; metadata management; and more) to enable trusted data for better business decisions.
• Mature data management capabilities by creating compliance criteria, defining policies and processes, and growing adoption.
• Ensure Circana benefits from a transparent, robust data and technology risk management program.
• This program will ensure (1) vendor compliance with Circana policies and contractual obligations, including SLAs and security obligations, (2) corporate governance compliance with SEC regulations relating to cybersecurity risk management, strategy, governance, and incident disclosure, (3) cross functional risk assessments, and (4) maintenance of a risk register.
• Identify, develop, and drive the development and adoption of various data management capabilities across multiple data platforms, including (1) data inventory, classification and (flow) mapping, (2) data access controls, de-identification, and encryption, (3) insider thre