Assistant General Counsel – Privacy

Job Description

Assistant General Counsel – Privacy | Hertner, Block & Bowser, Inc.

The Tone:
This is a critical leadership role at Hertner, Block & Bowser, Inc., focused on privacy and data protection. The company is seeking an attorney to lead its privacy and data protection legal strategy across the U.S. and Canada, while collaborating with international colleagues on the global privacy program. This position is vital for providing clear, practical legal advice and navigating an evolving regulatory landscape to build practical privacy solutions that support the business.

The TL;DR
• Role: Full Time
• Team: Reporting to the General Counsel, partnering with Legal, Compliance, Information Security, Technology, Product, Operations, Procurement, Risk Management, and business leaders.
• Mission: Lead the Company’s privacy and data protection legal strategy across the U.S. and Canada.

What You’ll Actually Do
• Strategy Leadership: Lead the Company’s privacy legal strategy across the U.S. and Canada, advising on privacy, data protection, cybersecurity, AI, consumer protection, and related regulatory issues.
• Business Partnership: Partner with business leaders on the collection, use, sharing, retention, transfer, and protection of personal data, and provide practical guidance on U.S. and Canadian privacy laws, emerging regulations, and the impact of global privacy laws.
• Program Oversight: Oversee core privacy program activities, including privacy and data protection impact assessments, data mapping, retention, consent management, data subject rights, incident response, breach investigations, and regulatory notifications.
• Contract Negotiation: Draft and negotiate privacy and data protection provisions in commercial agreements, vendor contracts, technology agreements, data processing agreements, strategic partnerships, and cross-border data transfer arrangements.
• Policy Development: Develop and maintain privacy policies, standards, training, governance processes, and legal playbooks, while managing outside counsel and partnering with global privacy teams to promote consistency and best practices.

The Must-Haves
• Background: Juris Doctor from an ABA-accredited law school and active bar membership in at least one U.S. jurisdiction, with experience in privacy, data protection, technology, cybersecurity, consumer protection, regulatory, or compliance law.
• Experience: At least 8 years of experience gained at a leading law firm and/or in-house legal department, including advising complex, consumer-facing, technology-enabled, or highly regulated businesses.
• Skills: Strong working knowledge of U.S. privacy laws (including CCPA/CPRA, state privacy laws, breach notification, data transfer, privacy-by-design, AI, automated decision-making, digital platforms, and consumer data), understanding of global privacy law impact, ability to translate legal requirements into practical, risk-based business advice, strong leadership, communication, and business judgment.
• Bonus: Sound judgment, integrity, a collaborative approach, and the confidence to address difficult issues while helping the business move forward.