Apply on Employer Site

lululemon · 3 days ago

Senior Privacy Counsel

Seattle, WA

Full-time

Hybrid

Senior Level

$155K/yr - $204K/yr

7+ years exp

lululemon is an innovative performance apparel company that focuses on creating positive change for a healthier future. They are seeking a Senior Privacy Counsel to provide expert legal advice on complex privacy matters and manage risk associated with emerging privacy legislation. This role involves guiding business leaders on compliance with global privacy laws and collaborating with cross-functional partners on privacy initiatives.

ApparelE-CommerceFitnessLifestyleSporting GoodsWellness

Comp. & Benefits

No H1B

Responsibilities

Day to day legal direction on complex global privacy laws and regulations with diverse business stakeholders

Provide direction to teams during incidents, engagement of outside counsel, and generating clear guidance to both business and legal leaders

Ability to provide tactical risk-based guidance that balances business objectives, company values, and shifting compliance requirements

Provide direction on Organizational and Departmental strategy to create appropriate implementation strategies and effectively advise cross-functional partners

Partners closely with the Cybersecurity team, revising existing policies, procedures, and continued counsel

Completes complex risk assessments on critical business initiatives with consistently clear guidance to business stakeholders

Provides direction to cross-functional partners on external vendor relationships and business goals, as well as quickly collecting input from key departments to apply policies and minimize risk, including Insurance, Finance, and Information Security

Identifies legal issues, analyzes risks, and creates and implements solutions structured to achieve business objectives efficiently with rationalized legal and practical risk. This role also engages directly with external counsel on incidents, data subject access requests and new legislation

Collaborates with the rest of the Privacy team on compliance execution, matter and regulatory tracking, program maturity projects, and reporting to leadership

Provides clear counsel on legal matters to all levels within the organization, working independently and representing the Privacy team on complex privacy issues

Qualification

Privacy law expertiseGDPR knowledgeData privacy complianceCIPP certificationLegal judgmentAnalytical skillsCommunication skillsProblem-solving skillsNegotiation skillsCross-functional collaboration

Required

Excellent organizational and communication skills, and the ability to communicate privacy and legal concepts to technical and non-technical audiences

Ability to thrive in a fast-paced, dynamic, sometimes ambiguous environment

Experience navigating European data privacy requirements and advising regional business teams

Possess sound legal and business judgement and flexibility/adaptability to manage multiple wide-ranging matters, conflicting deadlines, and new areas of expertise as business needs change

Excellent problem identification, problem solving, and analytical skills

Ability to establish cross-functional, collaborative relationships with business and technology partners

Exceptional communication skills to advise stakeholders across the business on complex legal concepts

Ability to negotiate with and influence key stakeholders internally

Admission into the bar of Practice or the ability to register as in-house counsel

7+ years of privacy legal experience

Licensed to practice in Washington state or ability to practice in house

Understanding of key global privacy and marketing compliance laws including CCPA/CPRA, PIPEDA, GDPR, regional data breach regulations, CAN-SPAM, COPPA, CASL, etc

Knowledge of common privacy laws, practices, and regulatory frameworks (PCI, GDPR, SOX, etc.), as well as a general understanding of various retail technologies, information security, and risk management standards

Strong knowledge in digital technologies (i.e., social media, digital advertising, mobile apps, mobile payments), with particular focus on how these technologies are used to collect, use and/or share information