Associate General Counsel, Privacy

Overview

Join to apply for the Associate General Counsel, Privacy role at SiriusXM
.

Sirius XM Radio and its brands (Pandora, Sirius XM Media, Ads Wizz, Simplecast, and Sirius

XM Connect) are leading a new era of audio entertainment and services by delivering the most compelling subscription and ad-supported audio entertainment experience for listeners — in the car, at home, and anywhere on the go with connected devices. Our vision is to shape the future of audio, where everyone can be effortlessly connected to the voices, stories and music they love wherever they are.

This is the place where a diverse group of emerging talent and legends alike come to share authentic and purposeful songs, stories, sounds and insights through some of the best programming and technology in the world. Our critically-acclaimed, industry-leading audio entertainment encompasses music, sports, comedy, news, talk, live events, and podcasting. No matter their individual role, each of our employees plays a vital part in bringing Sirius

XM’s vision to life every day.

Sirius XM Radio LLC is the leading audio entertainment company in North America, and the premier programmer and platform for subscription and digital advertising-supported audio products. Sirius

XM’s platforms collectively reach approximately 150 million listeners, the largest digital audio audience across paid and free tiers in North America, and deliver music, sports, talk, news, comedy, entertainment and podcasts. Pandora, a subsidiary of Sirius

XM, is the largest ad-supported audio entertainment streaming service in the U.S. The Company’s advertising sales organization leverages its scale, cross-platform sales organization and ad tech capabilities to deliver results for audio creators and advertisers. In addition to its audio entertainment businesses, Sirius

XM offers connected vehicle services to automakers.

This is the place where a diverse group of emerging talent and legends alike come to share authentic and purposeful songs, stories, sounds and insights through some of the best programming and technology in the world.

• Work collaboratively and effectively with stakeholders across the Sirius
  
  XM enterprise, including Information Security and business leads
• Assist in communication and rollout of regulatory compliance initiatives across brand entities; work with brand SMEs to define business requirements for compliance with privacy legislation, trade and industry guidelines, the Automotive Alliance privacy principles, and other frameworks applicable to the audio, connected vehicle and advertising businesses
• Coordinate US privacy governance with European privacy team
• Provide privacy-by-design consultation at early development stage for new products and/or uses of personal data to ensure data governance and policy compliance
• Assess new business processes for privacy impact; draft risk assessments
• Provide legal and privacy guidance on customer and vendor due diligence questionnaires
• Negotiate data processing agreements and other data-related contract provisions
• Maintain and update internal and external privacy policies
• Conduct internal training for business teams on data privacy rules and policies
• Support privacy incident response investigations and remediation
• Maintain currency of knowledge of laws, regulations, court decisions, and industry best practices on privacy, data protection, artificial intelligence, biometrics, and consumer regulations as related to data collection, use and processing

• J.D. from an accredited U.S. law school
• Licensed and qualified to practice law in at least one state in the United States
• CIPP certification

• 8+ years of post-qualification legal experience in-house or private practice, with at least 2 years of experience in data privacy
• Experience drafting and negotiating contracts with technology and service providers including SaaS and cloud providers, marketing technologies, advertisers, publishers, and advertising measurement and attribution vendors
• Proven experience and ability to understand and apply data privacy and information security knowledge to a corporate data privacy program