Data Privacy And Compliance Attorney

Advance Auto Parts is looking for a motivated, nimble, collaborative and experienced attorney to join our Ethics and Compliance (E&C) team as a Senior Counsel focused on data privacy and general legal compliance matters such as anti-bribery/anti-corruption, trade compliance and environmental/safety matters. Responsibilities include partnering with business units to understand and enable business objectives with practical privacy and legal compliance guidance, help draft policies and procedures, conduct or oversee internal investigations and direct data privacy/cyber security incident response efforts. This role reports to the Vice President, Associate General Counsel and Chief Compliance Officer.

Responsibilities

• Work closely with business leaders, legal professionals, and our information security team to advise on all aspects of global privacy laws and regulations, including data protection, data retention, data security and data breach rules.
• Partner with lawyers and advise business leaders on privacy, digital marketing and corporate compliance matters related to the Company’s retail stores, ecommerce business, corporate offices, merchandising, distribution centers and workforce.
• Help chart the Company’s long-term strategy for handling customer information associated with our retail operations, online advertising activities, electronic devices, and other business areas
• Support in negotiation of privacy, information security and compliance terms in technology, vendor, and service provider contracts
• Support in conducting privacy impact analyses, risk assessments and due diligence for existing and new third parties to address privacy and corporate compliance risks and legal requirements;
• Lead cross-functional efforts to address data privacy and compliance legal risks, including establishing and driving a privacy program framework that includes written standards, training, communications, monitoring and third party management
• Monitor and assess legislative, regulatory, and enforcement developments in privacy law and corporate compliance matters in the US, Canada, India and Taiwan
• Lead California Consumer Privacy Act (CCPA) and other state privacy law compliance efforts, including analyzing whether applicability of relevant statutes to certain third parties.
• Partner with the information security team on handling data security incidents/events and represent the Legal Department on incident response matters

Experience and Skills

• Strong academic credentials, including a J.D. degree from an accredited law school, and membership in good standing in at least one state bar, plus 12+ years of privacy law and corporate compliance
• Training at a national law firm or strong in-house experience is preferred
• Thorough understanding of internet architecture and related technologies, including e-commerce, data processing, location-based services and online advertising business models, and the legal and regulatory environment that surrounds them
• Hands-on experience interacting directly with privacy and data protection regulators and regulators of US public companies
• Proven track record of leadership, cross-functional collaboration and successful management of multiple stakeholders, including senior executives
• Appetite for and aptitude to succeed in a rapidly changing business environment
• Excellent business-oriented judgment and the ability to analyze problems, propose resolutions, and provide advice that is creative, practical and legally acceptable, taking into account the needs and objectives of the business
• Exceptional written and verbal communication skills, plus thorough knowledge of Microsoft Office, including PowerPoint, Excel and Word
• Highest standards of ethics and professional integrity
• Excellent references
• Role is based out of Raleigh, NC, but remote work arrangement may be possible

CAREER SNAPSHOT

Employee Type:
Full-Time
Location:
Raleigh, NC
Career Type:
Legal
Date Posted:
4/12/2021