Our Purpose
We work to connect and power an inclusive, digital economy that benefits everyone, everywhere by making transactions safe, simple, smart and accessible. Using secure data and networks, partnerships and passion, our innovations and solutions help individuals, financial institutions, governments and businesses realize their greatest potential. Our decency quotient, or DQ, drives our culture and everything we do inside and outside of our company. We cultivate a
culture of inclusion
for all employees that respects their individual strengths, views, and experiences. We believe that our differences enable us to be a better team – one that makes better decisions, drives innovation and delivers better business results.
Title and Summary
Senior Counsel, Privacy and Data Protection

Overview

• Mastercard is committed to balancing innovation while protecting individual privacy and has embraced privacy and data protection as core to the successful execution of its business strategy
• As part of that commitment Mastercard has established a world-class privacy program and is currently adding talent to its global team
• The Senior Counsel, Privacy and Data Protection will provide key product support based in the North American market to ensure compliance with global privacy and data-related laws while enabling innovation, as well as support the M&A team in the execution of Mastercard’s strategy.
• The Senior Counsel will work as part of a cross-functional global team of privacy and data protection professionals dedicated to ensuring compliance while continuing to enable business solutions and innovation
• The position will report to Senior Managing Counsel, Privacy and Data Protection.

Role

• Ensure product and platform alignment and compliance with Mastercard’s policies, procedures and processes and with global privacy and data-related laws, including data localization, outsourcing, and consumer protection requirements.
• Support business colleagues and facilitate a Privacy by Design process to ensure privacy compliance is built into all data driven products
• Understand and distill complex global privacy and data protection laws, including CCPA, GLBA, GDPR, PIPEDA, and FCRA, and apply those concepts to challenging business and data constructs and processes
• Facilitate the creation of employee engagement programs that prioritize compliance with prevailing privacy and data protection laws and regulations
• Provide training to internal teams on data privacy, data protection, global privacy and regulatory developments, and how to implement Privacy by Design across Mastercard’s varied products and services.
• Perform detailed data flows and analyses of laws and regulations in collaboration with business units to enable business operations and assist in achieving major organizational goals
• Negotiate complex data-related agreements, quickly identifying the legal and strategic implications of contractual terms and conditions
• Strengthen partnerships across the enterprise to ensure data privacy and protection is a key factor considered in product development
• Appreciate the nexus between data privacy, data protection, and the use of data to advance major corporate strategic goals

All About You

Education

• Bachelor’s degree required, Juris Doctor required
• CIPP certification preferred

Experience/Knowledge

• Privacy and data protection experience required
• Legal experience in interactive technology, product development, data-related commercial agreements, processing of human resources data, or data-driven products preferred
• Membership to a Bar

Competencies

• Expertise in regulatory frameworks, including CCPA, GLBA, GDPR, PIPEDA, and FCRA, and familiarity with industry best practices for collection and use of data
• Understanding of consumer loyalty, marketing and promotions industry
• Understanding of the intersection between privacy and employment laws and regulations, with an emphasis on those in North America
• Familiarity with the financial services industry and payment processing
• Ability to readily distill legal requirements into practical, actionable advice
• Creative thinker able to support innovation while still managing risk
• Motivated Self-starter with ability to excel at multi-tasking in a fast-paced environment
• Strong analytic capabilities and written and oral communication skills. Attention to detail is a must
• Exceptional interpersonal skills with proven experience in relationship building and partnering; must work well in both team and individual settings
• Ability to work well as part of a team of geographically dispersed highly skilled professionals

Mastercard is an inclusive equal opportunity employer that considers applicants without regard to gender, gender identity, sexual orientation, race, ethnicity, disabled or veteran status, or any other characteristic protected by law. In the US or Canada, if you require accommodations or assistance to complete the online application process or during the recruitment process, please contact reasonable_accommodation@mastercard.com and identify the type of accommodation or assistance you are requesting. Do not include any medical or health information in this email. The Reasonable Accommodations team will respond to your email promptly.
Corporate Security Responsibility

All activities involving access to Mastercard assets, information, and networks comes with an inherent risk to the organization and, therefore, it is expected that every person working for, or on behalf of, Mastercard is responsible for information security and must:

• Abide by Mastercard’s security policies and practices;
• Ensure the confidentiality and integrity of the information being accessed;
• Report any suspected information security violation or breach, and
• Complete all periodic mandatory security trainings in accordance with Mastercard’s guidelines.

In line with Mastercard’s total compensation philosophy and assuming that the job will be performed in the US, the successful candidate will be offered a competitive base salary based on location, experience and other qualifications for the role and may be eligible for an annual bonus or commissions depending on the role. Mastercard benefits for full time (and certain part time) employees generally include: insurance (including medical, prescription drug, dental, vision, disability, life insurance), flexible spending account and health savings account, paid leaves (including 16 weeks new parent leave, up to 20 paid days bereavement leave), 10 annual paid sick days, 10 or more annual paid vacation days based on level, 5 personal days, 10 annual paid U.S. observed holidays, 401k with a best-in-class company match, deferred compensation for eligible roles, fitness reimbursement or on-site fitness facilities, eligibility for tuition reimbursement, gender-inclusive benefits and many more.
Pay Ranges
Purchase, New York: $151,000 - $241,000 USD

Role

• Ensure product and platform alignment and compliance with Mastercard’s policies, procedures and processes and with global privacy and data-related laws, including data localization, outsourcing, and consumer protection requirements.
• Support business colleagues and facilitate a Privacy by Design process to ensure privacy compliance is built into all data driven products
• Understand and distill complex global privacy and data protection laws, including CCPA, GLBA, GDPR, PIPEDA, and FCRA, and apply those concepts to challenging business and data constructs and processes
• Facilitate the creation of employee engagement programs that prioritize compliance with prevailing privacy and data protection laws and regulations
• Provide training to internal teams on data privacy, data protection, global privacy and regulatory developments, and how to implement Privacy by Design across Mastercard’s varied products and services.
• Perform detailed data flows and analyses of laws and regulations in collaboration with business units to enable business operations and assist in achieving major organizational goals
• Negotiate complex data-related agreements, quickly identifying the legal and strategic implications of contractual terms and conditions
• Strengthen partnerships across the enterprise to ensure data privacy and protection is a key factor considered in product development
• Appreciate the nexus between data privacy, data protection, and the use of data to advance major corporate strategic goal

All activities involving access to Mastercard assets, information, and networks comes with an inherent risk to the organization and, therefore, it is expected that every person working for, or on behalf of, Mastercard is responsible for information security and must:

• Abide by Mastercard’s security policies and practices;
• Ensure the confidentiality and integrity of the information being accessed;
• Report any suspected information security violation or breach, and
• Complete all periodic mandatory security trainings in accordance with Mastercard’s guidelines