Privacy & Data Protection Counsel

Job Description

Are you interested in being a part of a collaborative, energetic, and business-oriented legal team?  As an attorney at FIS, you will have the opportunity to work on some of the most challenging and relevant issues in financial services and information technology.  Our talented people empower us, and we believe in being part of a team that is pragmatic, collegial and enthusiastic about representing a thriving Fortune 500 company in a dynamic corporate industry.

About the team:

The FIS Legal team is comprised of approximately 200 attorneys and paraprofessionals worldwide who enjoy being an advisor to and partner with our businesses to help the company achieve its goals.  The Global Privacy & Data Protection Team forms part of the Legal Department.  The team has a global reach and is responsible for all aspects of Privacy & Data Protection across FIS’ entities.  We work collaboratively with each other and with our business colleagues to solve problems in an effective and pragmatic manner.  We view our role as one of supporting our business leaders in a variety of legal matters, and we strive to assist our businesses in meeting their objectives with sound, reasonable and well-considered legal counsel.  Our team provides advice and support to various stakeholders and senior management across the business, and the team consists of experienced legal, privacy, and data protection professionals. Being supportive, smart, collaborative, inclusive, creative, open, adaptable, compliant, ethical, and passionate are the core values of the team and our culture.

What you will be doing:

As experienced Privacy, Cybersecurity, & Data Protection Counsel for FIS, you will be responsible for providing advice on global privacy, cybersecurity, and data protection laws in all global jurisdictions.  You will be a part of a team whose task it is to verify our businesses are in compliance with privacy, cybersecurity, and data protection regulations. You will be a partner to the business, leading initiatives, providing consultative advice, and acting as a point of escalation for privacy and data protection matters.   

Key responsibilities include:

• Support the implementation of FIS’ privacy, cybersecurity, and data protection compliance program

• Provide legal advice on global privacy, cybersecurity, and data protection issues and laws

• Assist business units with understanding the Technical and Organizational Measures (TOMs) and Supplemental Measures

• Implement and update privacy, cybersecurity, and data protection related procedures, best practices, and guidelines

• Implement the Binding Corporate Rules

• Monitor changes in global privacy, cybersecurity, and data protection laws and work with FIS business leaders to address these developments

• Educate and train FIS personnel by development and use of training materials on privacy, cybersecurity, and data protection and contribute to increasing privacy, cybersecurity, and data protection awareness among FIS personnel

• Assist the Data Protection Officer in monitoring compliance with applicable laws and FIS’ policies

• Assist the Data Protection Officer in the event of regulatory audits, complaints and investigations

• Manage personal data breaches together with the global privacy incident response team and ensure timely and correct handling of data subject requests together with the relevant team

• Manage personal data breaches together with the global privacy incident response team, analyzing and advising on breach notification obligations to regulators and data subjects 

• Provide advice on Records of Processing, Data Protection Impact Assessments and Transfer Impact Assessments

• Support FIS’ deal attorneys to draft and negotiate privacy, cybersecurity, and data protection related agreements

• Closely collaborate and align about privacy, cybersecurity, and data protection compliance or related issues with the members of the Privacy and Data Protection Office, Information Security Office, and other relevant (group) functions

What you bring:

• You must have a minimum of 3+ years in the practice of law in a high-quality law firm or in-house environment, and be a seasoned, experienced legal professional with a full understanding of privacy, cybersecurity, and data protection legal issues.

• You must have strong analytical and advisory skills, including the ability to review and evaluate multi-faceted issues and counsel business colleagues on complex legal questions relating to various business matters, such as product development and compliance.  You must possess the ability to use creative problem-solving skills to resolve issues in a pragmati