Associate General Counsel, Privacy

SiriusXM; Boston (MA); On-site; USD 199,700 - 220,000; Full time

Job summary

A leading audio entertainment company is seeking an Associate General Counsel for Privacy in Boston, MA. This role involves collaborating with various stakeholders on privacy governance, drafting contracts, maintaining compliance with privacy laws, and providing legal guidance on data privacy matters. An ideal candidate has over 8 years of legal experience and a comprehensive understanding of data protection laws. Competitive salary ranging from $199,700 to $220,000 is offered, with potential incentives.

Qualifications

• 8+ years of post-qualification legal experience, with at least 2 years in data privacy.
• Experience in drafting and negotiating contracts with SaaS providers and advertisers.
• Understanding of data privacy and information security.

Responsibilities

• Work collaboratively with stakeholders including Information Security.
• Assist with regulatory compliance initiatives across brand entities.
• Negotiate data processing agreements.

Skills

Strong communication

Organizational skills

Contract drafting and negotiation

Attention to detail

Proficiency in Microsoft Office

Knowledge of data protection laws

Education

J.D. from an accredited U.S. law school

Licensed to practice law in at least one state

CIPP certification

Job description

Overview

Join to apply for the Associate General Counsel, Privacy role at SiriusXM.

Sirius XM Radio and its brands (Pandora, Sirius XM Media, AdsWizz, Simplecast, and SiriusXM Connect) are leading a new era of audio entertainment and services by delivering the most compelling subscription and ad-supported audio entertainment experience for listeners — in the car, at home, and anywhere on the go with connected devices. Our vision is to shape the future of audio, where everyone can be effortlessly connected to the voices, stories and music they love wherever they are. This is the place where a diverse group of emerging talent and legends alike come to share authentic and purposeful songs, stories, sounds and insights through some of the best programming and technology in the world. Our critically-acclaimed, industry-leading audio entertainment encompasses music, sports, comedy, news, talk, live events, and podcasting. No matter their individual role, each of our employees plays a vital part in bringing SiriusXM’s vision to life every day.

Sirius XM Radio LLC is the leading audio entertainment company in North America, and the premier programmer and platform for subscription and digital advertising-supported audio products. SiriusXM’s platforms collectively reach approximately 150 million listeners, the largest digital audio audience across paid and free tiers in North America, and deliver music, sports, talk, news, comedy, entertainment and podcasts. Pandora, a subsidiary of SiriusXM, is the largest ad-supported audio entertainment streaming service in the U.S. The Company’s advertising sales organization leverages its scale, cross-platform sales organization and ad tech capabilities to deliver results for audio creators and advertisers. In addition to its audio entertainment businesses, SiriusXM offers connected vehicle services to automakers.

This is the place where a diverse group of emerging talent and legends alike come to share authentic and purposeful songs, stories, sounds and insights through some of the best programming and technology in the world.

What You’ll Do

• Work collaboratively and effectively with stakeholders across the SiriusXM enterprise, including Information Security and business leads
• Assist in communication and rollout of regulatory compliance initiatives across brand entities; work with brand SMEs to define business requirements for compliance with privacy legislation, trade and industry guidelines, the Automotive Alliance privacy principles, and other frameworks applicable to the audio, connected vehicle and advertising businesses
• Coordinate US privacy governance with European privacy team
• Provide privacy-by-design consultation at early development stage for new products and/or uses of personal data to ensure data governance and policy compliance
• Assess new business processes for privacy impact; draft risk assessments
• Provide legal and privacy guidance on customer and vendor due diligence questionnaires
• Negotiate data processing agreements and other data-related contract provisions
• Maintain and update internal and external privacy policies
• Conduct internal training for business teams on data privacy rules and policies
• Support privacy incident response investigations and remediation
• Maintain currency of knowledge of laws, regulations, court decisions, and industry best practices on privacy, data protection, artificial intelligence, biometrics, and consumer regulations as related to data collection, use and processing

What You’ll Need

Education

• J.D. from an accredited U.S. law school
• Licensed and qualified to practice law in at least one state in the United States
• CIPP certification

Experience

• 8+ years of post-qualification legal experience in-house or private practice, with at least 2 years of experience in data privacy
• Experience drafting and negotiating contracts with technology and service providers including SaaS and cloud providers, marketing technologies, advertisers, publishers, and advertising measurement and attribution vendors
• Proven experience and ability to understand and apply data privacy and information security knowledge to a corporate data privacy program

Knowledge and Skills

• Up-to-date knowledge of data protection laws in US and Canada, including CCPA, GLBA, CAN-SPAM, US State privacy laws; knowledge of GDPR, UK-GDPR, e-Privacy and EU AI Act desirable
• Familiarity with advertising industry standards and the data requirements of the ad tech ecosystem
• Knowledge of privacy matters related to AI and ML is highly desirable
• Strong communication, organizational and presentation skills
• Strong contract drafting and negotiation skills
• Ability to work with creative and technical SMEs
• Ability to build collaborative relationships and drive results across functional disciplines
• Ability to work independently with minimal supervision
• Attention to detail and a solutions-oriented mindset
• Proficiency in Microsoft Office and Google applications
• Must have legal right to work in the U.S.

At SiriusXM, we carefully consider a wide range of factors when determining compensation, including your background and experience. The base salary for this position is typically in the range of $199,700 to $220,000 and will depend on your skills, qualifications, and experience. This role may be eligible for discretionary short-term and long-term incentives. We encourage all interested candidates to apply.

Our goal at SiriusXM is to provide and maintain a work environment that fosters mutual respect, professionalism and cooperation. SiriusXM is an equal opportunity employer that does not discriminate on the basis of actual or perceived race, creed, color, religion, national origin, ancestry, alienage or citizenship status, age, disability or handicap, sex, gender identity, marital status, familial status, veteran status, sexual orientation or any other characteristic protected by applicable federal, state or local laws.

The requirements and duties described above may be modified or waived by the Company in its sole discretion without notice.