Senior Counsel - Privacy & Data Protection

Our Purpose

We work to connect and power an inclusive, digital economy that benefits everyone, everywhere by making transactions safe, simple, smart and accessible.
Using secure data and networks, partnerships and passion, our innovations and solutions help individuals, financial institutions, governments and businesses realize their greatest potential.
Our decency quotient, or DQ, drives our culture and everything we do inside and outside of our company.
We cultivate a culture of inclusion for all employees that respects their individual strengths, views, and experiences.
We believe that our differences enable us to be a better team - one that makes better decisions, drives innovation and delivers better business results.


Title and Summary

Senior Counsel - Privacy & Data Protection

Overview
• Mastercard is committed to balancing innovation while protecting individual privacy and has embraced privacy and data protection as core to the successful execution of our business strategy.
As part of that commitment, Mastercard has established a world-class privacy program and is adding talent to our global team.

• The Senior Counsel role will ensure compliance with credit risk and privacy and data protection laws while enabling data-driven innovation, with particular focus on supporting the Data & Services ("D&S") organization within Mastercard.

• The position will report to the Senior Managing Counsel, Privacy & Data Protection who provides global privacy support for D&S, and will serve as a member of both the Global Privacy & Data Protection team and the Law & Policy team.

• The ideal candidate will have the ability to think and act both strategically and tactically with respect to the needs of business clients and their objectives while ensuring that the corporation remains compliant with credit risk and data protection laws and other laws relating to data as well as industry best practices in the credit risk area.


Role
• Engage with business and legal stakeholders to conduct privacy by design reviews for new D&S products and services, including for products relating to credit risk.

• Among other things, this involves advising on the intersection between privacy laws, credit reporting laws, and other data-related compliance requirements as they pertain to data analytics offerings, consulting services, marketing services, and other products developed by D&S-including developing business-friendly legal guidelines for these activities while following the Mastercard privacy by design process.

• Identify business requirements resulting from new and evolving privacy and credit risk laws and regulations, and provide guidance and thought leadership on topics relevant to the D&S organization, including but not limited to alternative credit risk solutions, data anonymization, and the application of artificial intelligence capabilities to the credit risk and data analytics space.

• Collaborate with other internal stakeholders on regional privacy analysis and advice relating to global D&S products and services, including helping design controls for data environments used to support credit risk analytics.

• Monitor changing global laws relating to permissible use of credit data and regulatory registration requirements, facilitate the review of local requirements, develop internal legal guidelines to promote consistency in credit risk projects within Mastercard, and support the drafting and negotiation of credit-related and other data processing contract terms.

• Educate the business on privacy and credit risk developments and controls for the further development of D&S products and services.

• Where necessary, identify, document and update a range of stakeholders including executives on identified privacy and credit risk compliance gaps and recommended remedial measures.


All About You
• JD from an accredited law school and admitted to practice in the US.

• Demonstrated experience advising companies in the credit risk analytics space on privacy, credit risk, and data-related issues.

• Demonstrated familiarity with data analytics, computer science, and/or mathematics preferred.

• Expertise in credit reporting laws and regulations, as well as global privacy and data regulatory laws and frameworks, including the GDPR and privacy principles that are common across global laws and regulations.

• Demonstrated experience in relevant technologies including data anonymization, privacy enhancing technologies, and artificial intelligence, and familiarity with ethical frameworks, data governance, and accountability.

• Familiarity with emerging technologies and associated credit risk and privacy implications.

• Strong analytic capabilities and written and oral communication skills.

• Exceptional interpersonal skills with proven experience in relationship building and partnering with legal, business, and technical colleagues.

• Ability to motivate and influence highly-skilled professionals to achieve major organizational goals.

• Familiarity with Privacy by Design methodologies.

• Strong writing skills and ability to simplify technical material for other audiences, including business teams, legal departments, and regulators.

• An understanding of the credit risk industry in general, accompanied by an ability to acquire a deep understanding of Mastercard products and services in this space.

#AI3

Mastercard is an inclusive equal opportunity employer that considers applicants without regard to gender, gender identity, sexual orientation, race, ethnicity, disabled or veteran status, or any other characteristic protected by law.
In the US or Canada, if you require accommodations or assistance to complete the online application process or during the recruitment process, please contact [redacted] and identify the type of accommodation or assistance you are requesting.
Do not include any medical or health information in this email.
The Reasonable Accommodations team will respond to your email promptly.


Corporate Security Responsibility

All activities involving access to Mastercard assets, information, and networks comes with an inherent risk to the organization and, therefore, it is expected that every person working for, or on behalf of, Mastercard is responsible for information security and must:
Abide by Mastercard's security policies and practices; Ensure the confidentiality and integrity of the information being accessed; Report any suspected information security violation or breach, and Complete all periodic mandatory security trainings in accordance with Mastercard's guidelines.
In line with Mastercard's total compensation philosophy and assuming that the job will be performed in the US, the successful candidate will be offered a competitive base salary based on location, experience and other qualifications for the role and may be eligible for an annual bonus or commissions depending on the role.
Mastercard benefits for full time (and certain part time) employees generally include: insurance (including medical, prescription drug, dental, vision, disability, life insurance), flexible spending account and health savings account, paid leaves (including 16 weeks new parent leave, up to 20 paid days bereavement leave), 10 annual paid sick days, 10 or more annual paid vacation days based on level, 5 personal days, 10 annual paid U.S. observed holidays, 401k with a best-in-class company match, deferred compensation for eligible roles, fitness reimbursement or on-site fitness facilities, eligibility for tuition reimbursement, gender-inclusive benefits and many more.