New

Senior Counsel - Privacy & Data Risk

Volkswagen Group of America
United States, Virginia, Reston
May 09, 2025
Primary Location - United States-Virginia-Reston Description Role Summary: As part of the Privacy Office within the Office of General Counsel, this attorney will provide legal and regulatory compliance operations advice to the Company on privacy and data governance to all business functions and brands of Volkswagen Group of America, Inc., where the Company is facing novel and cutting-edge privacy issues relating to connected cars, automated driving, big data analytics, and cross-border data access and transfers. This attorney will work closely with the relevant business areas and affiliated companies to advise regarding U.S. legal requirements and risk, and review and advise on contracts. In addition, this position will serve a core role helping manage the operational activities of the Privacy Office at VWGoA, working closely with attorneys, privacy compliance specialists, IT, Information Security, and business units, to support the team's: execution of strategic plans, policies, and procedures, training of legal department and company employees, management and integration of technology purchases, and engagement, retention and management of vendors. Role Responsibilities: Oversees legal advice to the Company and provides day-to-day counsel on matters and projects related to areas of expertise (90%) * Serves as legal expert and provides strategic direction as well as day-to-day counsel, review and commentary to executives, business colleagues, and IT organization regarding the requirements of federal, state, and international privacy and data security statutes and regulations, controls, and best practices for Volkswagen of America, Audi of America, and the other Volkswagen Group of America brands, in product development, sales and marketing, human resources, information technology, and other core business functions. * Assist in developing Privacy-By-Design strategies for digital marketing, mobile applications, business analytics, and connected car technologies. * Assist in developing and managing Company's formal privacy program, including development and management of governance policies and procedures, compliance materials, and employee training * Conduct privacy risk assessments on individual business use cases and overall business risk areas * Draft, review, and negotiate privacy and cybersecurity terms in vendor and affiliate contracts. * Manage data governance policies, keeping them current in light of recent legal developments * Support privacy program operations, including policy and procedure development, training, audits, management and integration of technology purchases, and engagement, retention and management of vendors. * Assist with legal advice around artificial intelligence and data governance initiatives with internal stakeholders. * Assist with cybersecurity legal advice, and incident and breach response as needed * Coordinate with responsible business units and counterparts in the Legal departments in Germany, Canada, and Mexico. * Handle data privacy related inquiries from internal and external stakeholders, and provide legal counsel regarding same. * Manage outside counsel regarding US privacy and data security matters. Training and Processes (10%) * Attends industry and legal seminars, workshops, etc., as appropriate to keep current on issues, laws and regulations. * Conducts training in relevant practice areas for business units. * Designs and implements relevant procedures and processes and proper documentation with respect to the above-listed responsibilities and activities. Qualifications Years of Relevant Experience: 7+ years practicing privacy law in a law firm, corporate legal department, or equivalent experience in privacy legal matters Education- Required: Bachelor's and Law Degrees from top-tier academic institutions. Membership in good standing in the State Bar of Virginia, or at least one other US state and the ability to operate with a Virginia corporate counsel certificate. Education- Desired: IAPP certifications (CIPP-US, CIPM) Skills: Sound professional judgment; Strong communication skills; Ability to analyze legal issues in business context with solution-oriented approach; Ability to foster partnership between legal department and business; Excellent drafting and written/oral communications abilities; Excellent client handling skills; Excellent attention to detail and organization skills; Excellent negotiation and persuasion skills; Strong presentation skills; Strong resource and people management skills Specialized Skills- Required: At least 7 years of experience (related to the topics listed in this job description) as an attorney and litigator at a recognized commercial law firm, regulatory agency, or in-house position, or the equivalent. Experience managing attorneys and legal professionals to address cross-functional and multi-disciplinary legal and business issues. Experience advocating and presenting to senior executives. Ability to quickly learn and become conversant in a variety of legal issues Substantial understanding of and experience in data privacy law (including GDPR, US state and federal privacy laws, and data breach & notification laws) Experience drafting and negotiating data privacy and security contract provisions Specialized Skills- Required: Automotive industry experience Experience supporting privacy by design review and concepts in product and service development Experience advising on privacy compliance and governance in adtech Experience with global company addressing privacy laws of multiple jurisdictions Experience operationalizing privacy laws into a privacy compliance program Experience implementing artificial intelligence regulatory governance in a corporate or government setting. German Language Skills Work Flexibility: Hybrid work schedule Possible travel Volkswagen Group of America is an Equal Opportunity Employer. We welcome and encourage applicants from all backgrounds, and do not discriminate based on race, sex, age, disability, sexual orientation, national origin, religion, color, gender identity/expression, marital status, veteran status, or any other characteristics protected by applicable laws. #LI-GM1 #LI-HYBRID