Assistant General Counsel – Privacy

Hertner, Block & Bowser, Inc.; Kolkata District; On-site; INR 17,143,000 - 32,381,000; Full time

Job summary

Hertner, Block & Bowser, Inc. is seeking an Assistant General Counsel- Privacy to lead the company's privacy and data protection strategy across the U.S. and Canada, in partnership with international colleagues to support the global privacy program.

Reporting to the General Counsel, the role focuses on practical advice on privacy, data governance, cybersecurity, AI, and regulatory developments, while translating complex laws into risk-based business guidance for cross-functional teams.

Qualifications

• J.D. from ABA-accredited law school and active bar membership in at least one U.S. jurisdiction.

Responsibilities

• Lead the Company's privacy legal strategy across the U.S. and Canada, advising on privacy, data protection, cybersecurity, AI, consumer protection, and related regulatory issues.
• Partner with business leaders on the collection, use, sharing, retention, transfer, and protection of personal data, and provide practical guidance on U.S. and Canadian privacy laws, emerging regulations, and the impact of global privacy laws on the business.
• Oversee core privacy program activities, including privacy and data protection impact assessments, data mapping, retention, consent management, data subject rights, incident response, breach investigations, and regulatory notifications.
• Draft and negotiate privacy and data protection provisions in commercial agreements, vendor contracts, technology agreements, data processing agreements, strategic partnerships, and cross-border data transfer arrangements.
• Develop and maintain privacy policies, standards, training, governance processes, and legal playbooks, while managing outside counsel and partnering with global privacy teams to promote consistency and best practices across the organization.

Education

J.D. from ABA-accredited law school

Job description

Reporting to the General Counsel, the Assistant General Counsel- Privacy will lead the Company's privacy and data protection legal strategy across the U.S. and Canada while partnering with international colleagues to support the global privacy program. This is a highly collaborative role that works closely with Legal, Compliance, Information Security, Technology, Product, Operations, Procurement, Risk Management, and business leaders to build practical privacy solutions that support the business.

The ideal candidate is a business-minded attorney who can provide clear, practical advice on privacy, data protection, cybersecurity, AI, and data governance while helping the Company navigate an evolving regulatory landscape. Although this role is focused on the U.S. and Canada, it also requires an understanding of how global privacy laws affect the Company's operations and business activities.

Key Responsibilities

• Lead the Company's privacy legal strategy across the U.S. and Canada, advising on privacy, data protection, cybersecurity, AI, consumer protection, and related regulatory issues.
• Partner with business leaders on the collection, use, sharing, retention, transfer, and protection of personal data, and provide practical guidance on U.S. and Canadian privacy laws, emerging regulations, and the impact of global privacy laws on the business.
• Oversee core privacy program activities, including privacy and data protection impact assessments, data mapping, retention, consent management, data subject rights, incident response, breach investigations, and regulatory notifications.
• Draft and negotiate privacy and data protection provisions in commercial agreements, vendor contracts, technology agreements, data processing agreements, strategic partnerships, and cross-border data transfer arrangements.
• Develop and maintain privacy policies, standards, training, governance processes, and legal playbooks, while managing outside counsel and partnering with global privacy teams to promote consistency and best practices across the organization.

What We're Looking For

• J.D. from an ABA-accredited law school and active bar membership in at least one U.S. jurisdiction.
• At least 8 years of experience in privacy, data protection, technology, cybersecurity, consumer protection, regulatory, or compliance law, gained at a leading law firm and/or in-house legal department.
• Strong working knowledge of U.S. privacy laws, including CCPA/CPRA, state privacy laws, breach notification requirements, data transfer issues, privacy-by-design principles, and emerging regulations involving AI, automated decision-making, digital platforms, and consumer data, along with an understanding of how global privacy laws impact U.S. and Canadian operations.
• Experience advising complex, consumer-facing, technology-enabled, or highly regulated businesses, with the ability to translate legal requirements into practical, risk-based business advice.
• Strong leadership, communication, and business judgment, with experience working cross-functionally and advising senior executives on privacy, data governance, regulatory developments, and legal risk. The successful candidate will bring sound judgment, integrity, a collaborative approach, and the confidence to address difficult issues while helping the business move forward.