Senior Data Privacy & Compliance Counsel: AI & Cyber Risk

Lidl US; Arlington (VA); Hybrid; USD 160,000 - 180,000; Full time

Benefits offered by this job

Starting pay: $160,000

Hybrid work schedule

Medical & Prescription coverage

Dental & Vision coverage

Paid Holiday & PTO

401K plan with company match

Total Well-Being Program

Voluntary Pay access (DailyPay)

Job summary

Lidl US seeks a Senior Corporate Counsel - Data Privacy & Compliance to serve as the primary legal authority on privacy governance and cybersecurity risk across the enterprise. You will lead DPIAs, manage DSAR processes, and collaborate with cross-functional teams to embed privacy-by-design and responsible AI governance into products and operations.

You will advise leadership on evolving privacy laws in the US, work with authorities and external counsel, and guide complex DPAs and cross-border

Qualifications

• Juris Doctor (J.D.) and active license to practice law in at least one US jurisdiction.
• Progressive experience in corporate data privacy, cybersecurity, regulatory compliance, and information governance.
• IAPP certification (CIPP/US, CIPM) strongly preferred.
• Deep knowledge of US privacy statutes (CCPA/CPRA, VCDPA) and GDPR; cross-border data transfer awareness.
• Experience managing DPIAs across enterprise applications and data breach investigations.
• Strong legal judgment, analytical ability, and cross-functional leadership.
• Ability to translate privacy rules into actionable business guidance.

Responsibilities

• Regulatory Advice & Strategy: advise leadership on domestic/international data privacy and security laws and risks.
• Incident Response & Cyber Legal Leadership: direct strategy for cybersecurity incidents and regulatory reporting.
• Privacy-by-Design & DPIA Governance: establish DPIA framework and partner with product/engineering teams.
• Policy Architecture & Training: draft and update enterprise privacy and data security policies and training.
• DSAR: oversee DSAR program and complex data deletion/portability matters.
• Regulatory Matters & Outside Counsel: represent the company in regulatory inquiries and coordinate with external counsel.
• Commercial Transactions & Vendor Oversight: advise on DPAs, cross-border transfers, and vendor security terms.

Skills

Privacy law

Regulatory compliance

Incident response

Data governance

Cross-functional leadership

Education

Juris Doctor (J.D.)

Active US law license

IAPP certification (CIPP/US or CIPM)

Job description

Lidl US seeks a Senior Corporate Counsel - Data Privacy & Compliance to serve as the primary legal authority on privacy governance and cybersecurity risk across the enterprise. You will lead DPIAs, manage DSAR processes, and collaborate with cross-functional teams to embed privacy-by-design and responsible AI governance into products and operations.

You will advise leadership on evolving privacy laws in the US, work with authorities and external counsel, and guide complex DPAs and cross-border