Vice President, Head of Privacy (Privacy, Cyber Security, Consumer Compliance)

About this role

The mission of The New York Times is to seek the truth and help people understand the world. That means independent journalism is at the heart of all we do as a company. It’s why we have a world-renowned newsroom that sends journalists to report on the ground from nearly 160 countries. It’s why we focus deeply on how our readers will experience our journalism, from print to audio to a world-class digital and app destination. And it’s why our business strategy centers on making journalism so good that it’s worth paying for.

About the Role:

As part of the Commercial Business and Legal Affairs team and reporting to the SVP, Associate General Counsel & Strategic Partnerships, the Vice President, Head of Privacy (Privacy, Cyber Security, Consumer Compliance) is responsible for all legal aspects of data privacy, information security, and consumer marketing and subscriptions-related compliance across the company and for managing the Company's privacy compliance function. You will work closely with senior executives and operational leads as well as the working team, including the areas of marketing operations, subscription growth, product, engineering, technology, data governance, information security, commercial contracts, and marketing and advertising technology. In this position, you will manage a team.

This is a hybrid role based in our New York City headquarters. You can typically expect to come into the office 3 days per week.

Responsibilities:

• Advise all internal clients on the risks and operational controls related to the development, collection, use, transfer, and governance of personal data of consumers, employees, and other stakeholders. This will include privacy, online safety, and cybersecurity (from both U.S. and international perspectives).

• Advise key business stakeholders on the company’s data governance, cybersecurity, marketing and subscriptions compliance efforts in a manner consistent with the Company’s goals and culture.

• Drive measurable improvements in privacy program maturity, incident readiness, vendor governance, compliant product launches, and privacy risk reduction. Manage privacy program resourcing, vendor support, and outside counsel engagement for privacy matters, as applicable.

• Draft and/or update privacy program-related policies and standards, public-facing and internal; as well as terms of use, terms of sale, and other consumer-facing acceptable use and moderation policies.

• Supervise and oversee the preparation and updating of Data Protection Impact Assessments and other risk assessment and audit activities as needed. Conduct comprehensive business risk assessments; develop/implement risk mitigation and corrective action plans where needed.

• Advise on privacy regulatory and contractual compliance in marketing, ad sales, direct and programmatic advertising, identity resolution, data clean rooms, and third-party data and ad tech integrations to help ensure compliance with privacy and consumer protection laws and industry standards.

• Review, draft and negotiate data protection agreements and security exhibits and work closely with the appropriate teams to advise on third party risk reviews.

• Advise on all relevant consumer protection, subscriptions and marketing laws, regulations and best practices.

• Provide product counseling to include privacy, cybersecurity and consumer compliance legal advice as well as other areas of related legal need – in connection with product and platform developments and releases.

• Regularly track and counsel clients on legal US and international developments in areas of data privacy, cybersecurity and consumer marketing and subscription compliance.

• Serve as legal lead for all security incident response, working closely with the company’s Chief Information Security Officer and other key stakeholders; draft and update information security policies and procedures.

• Provide advice and guidance to data science and analytics teams on privacy-compliant deployment of machine learning models and personalization.

• Oversee and develop company-wide training strategy and execution for areas of coverage.

• Serve as point of contact for data protection authorities, regulatory inquiries, and industry groups.

• Excellent judgment and professional integrity.

• Handle high-volume workload efficiently.

• Demonstrate support and understanding of our value of journalistic independence and a strong commitment to our mission to seek the truth and help people understand the world.

Basic Qualifications:

• Juris Doctor is required and must be a member of the New York Bar.

• 15+ years of experience in US and international data privacy and protection; negotiating data privacy-related agreements, building, implementing, and maintaining a global privacy program; supporting cybersecurity.

• 5+ years of experience managing people with proven experience effectively managing cross-functional relationships and competing priorities.

• 5+ years of previous in-house experience.

• Experience advising on online safety laws such as age-appropriate design codes and app store age signals laws, and sensitive data privacy regulations such as laws governing health data in ad tech and biometric privacy.

• Experience advising or managing legal professionals who advise on a wide variety of consumer-related issues both domestic and international, including payflow, subscription offerings, marketing, auto-renewal and click-to-cancel laws, anti-spam, Telephone Consumer Protection Act, unfair and deceptive practice laws, customer care complaints and escalations, and payment card rules.

Preferred Qualifications:

• 5+ years in-house experience at a tech platform, media company, and/or subscription-first company.

REQ-020566

Additional Compensation and Benefits:

For roles in the U.S., dependent on your role, you may be eligible for variable pay, such as an annual bonus and restricted stock. Benefits may include medical, dental and vision benef

Similar jobs

• Vice President, US Privacy and Global Data Protection Officer — Springhealth66 · Remote
• Data Privacy & Protection Compliance Advisory, Vice President — MUFG · New York, NY | Irving, TX
• Senior Director, Chief Privacy Lead — ZOLL Medical Corporation · Chelmsford, MA | US PA Pittsburgh Gamma
• Head of Privacy & Security — Playlab · Remote
• Head of Privacy — Abridge · SF Office
• Vice President, Head of Business Controls – Technology & Cybersecurity — Sofi · CA - San Francisco; NY - New York City
• Vice President, Compliance — Amylyx · Cambridge, MA
• Vice President, Compliance — Beamtherapeutics · Cambridge, MA