Assistant General Counsel, Privacy & Data Protection

Assistant General Counsel, Privacy & Data Protection – Grade 12

In April 2025, S&P Global announced its intention to separate S&P Global Mobility (Mobility) from S&P Global to drive long‑term value creation. The intended separation will result in Mobility becoming a standalone public company that serves the complete automotive value chain – from vehicle manufacturers and suppliers to mobility service providers, retailers, consumers and finance and insurance companies. Using technology and data science, Mobility delivers unique insights, forecasts and advisory services across the whole automotive value chain.

Open (Virginia preferred)

The Assistant General Counsel, Privacy & Data Protection will support a global business of approximately $1.8billion in revenue and ~3,500 employees, providing legal, strategic and risk‑management advice on privacy, AI and data protection matters.

• Provide timely, practical and strategic legal advice across the organization.
• Monitor emerging privacy, cybersecurity and AI regulations and advise on business impact.
• Influence the implementation of privacy and data protection requirements across products, services and operations.
• Produce legal gap analyses of new laws and regulations.

• Lead breach notification, investigations, eDiscovery and regulatory exposure activities.
• Guide IT and Info Sec teams on data protection matters.

• Draft and maintain contract templates related to privacy, data protection and information governance.
• Provide privacy guidance to commercial and procurement attorneys on vendor DPAs.
• Ensure vendor due‑diligence controls comply with applicable law.

• Lead global privacy initiatives and develop policies, procedures, standards, templates and playbooks.
• Draft, review and maintain internal privacy policies, external privacy notices, consent language and disclosures.

• Support compliance team on privacy training and communications for legal and non‑legal audiences.
• Promote a culture of privacy awareness and accountability across the organization.

• Deliver effective privacy training and communications across regions, functions and levels.

• 5+ years of relevant experience in privacy and data protection, at a law firm and in‑house at a publicly traded company.
• Active bar membership in good standing in at least one U.S. jurisdiction (or equivalent foreign qualification).
• Deep expertise in GDPR, UK GDPR, U.S. state privacy laws (e.g. CCPA, CPRA) and other international regimes.
• Ability to manage high‑volume, complex environments with sound judgment and adaptability.
• Strong business judgment, problem‑solving and communication skills; ability to articulate business needs and deliver actionable strategies.
• Collaborative team player with a positive, “can‑do” attitude.

• Privacy or AI certifications.
• Experience supporting data‑intensive environments, digital platforms or AI‑enabled services.
• Experience with change management and leading or supporting transformation initiatives.

The final base salary will be based on geographic location, experience level, skills, licenses and certifications. In addition to base compensation, the role is eligible for an annual incentive plan and additional S&P Global benefits.

Mobility is an equal employment opportunity (EEO) employer. We do not discriminate based on age, color, national origin, citizenship status, disability, race, religion, creed, gender, sexual orientation, gender identity, genetic information, marital status, status with regard to public assistance, veteran status or any other characteristic protected by federal, state or local law. Mobility will provide reasonable accommodations for qualified individuals with disabilities.