Legal Director, Data Protection & Privacy

Legal Director, Data Protection & Privacy

Arrow Electronics is a global provider of products, services, and solutions to industrial and commercial users of electronic components and enterprise computing solutions. Arrow Electronics guides innovation forward for over 220,000 leading technology manufacturers and service providers. With 2024 sales of $27.9 billion, Arrow develops technology solutions that improve business and daily life. The company maintains 228 locations worldwide with over 85 countries served.

A Fortune 154 company with 21,500 employees worldwide, Arrow brings technology solutions to a breadth of markets, including telecommunications, information systems, transportation, medical, industrial, and consumer electronics.

We are seeking a seasoned and strategic Director, Data Protection & Privacy Counsel to lead our global legal functions for Data Protection, AI, Privacy and Cybersecurity. This role will be instrumental in shaping and executing our data protection strategy, ensuring compliance with evolving AI, data protection and global privacy laws, and enabling innovation across our products and services.

• Lead the development, implementation, and oversight of the company’s global privacy and data governance programing.
• Provide expert legal advice on privacy, data protection, AI, cybersecurity, and emerging technologies.
• Serve as company Data Protection Officer in requisite jurisdictions as needed.
• Monitor and interpret global privacy laws (e.g., GDPR, CCPA/CPRA, PIPL, HIPAA, ePrivacy Directive) and advise on business impact.
• Draft, negotiate, and maintain data protection agreements, privacy terms, and contractual provisions.
• Guide privacy-by-design and data governance principles across product development and business operations.
• Oversee privacy impact assessments (PIAs), data protection impact assessments (DPIAs), and incident response protocols. Key member of cyber incident response team.
• Develop and deliver privacy training and awareness programs for internal stakeholders.
• Represent the company in regulatory matters, audits, and external counsel engagements.
• Collaborate with compliance, security, and risk teams to align privacy practices with business goals.
• Lead and mentor a team of privacy professionals and legal staff.

• J.D. from an accredited law school and active membership in at least one U.S. state bar (CO bar or ability for reciprocity preferred).
• 7–10 years of legal experience, including in‑house and/or law firm roles focused on privacy and data protection.
• CIPP/E, CIPP/US, CIPM, or similar certification required.
• Deep knowledge of European and U.S. and other international privacy laws and frameworks.
• Experience advising on privacy issues in SaaS or consumer tech industries.
• Strong contract negotiation and drafting skills.
• Demonstrated ability to lead cross‑functional initiatives and manage complex legal issues.
• Excellent judgment, communication skills, and business acumen.
• Ability to work independently and collaboratively in a fast‑paced environment.

Hybrid: 3 days in office / 2 days work from home

• Medical, Dental, Vision Insurance
• 401(k), With Matching Contributions
• Short‑Term / Long‑Term Disability Insurance
• Health Savings Account (HSA)/Health Reimbursement Account (HRA) Options
• Paid Time Off (including sick, holiday, vacation, etc.)
• Tuition Reimbursement
• Growth Opportunities
• And more!

$ – $

Actual compensation offer to candidate may vary from posted hiring range based upon geographic location, work experience, education, and/or skill level. The pay ratio between base pay and target incentive (if applicable) will be finalized at offer.

US-CO-Denver, Colorado (Panorama Arrow Building)

Full time

Legal

Arrow is an equal‑opportunity employer. All applicants will be considered for employment without attention to race, color, religion, gender, age, sexual orientation, gender identity, national origin, veteran or disability status. (Arrow EEO/AAP policy)

We anticipate this requisition will be open for a minimum of five days, though it may be open for a longer period of time. We encourage your prompt application.

In any materials you submit, you may redact or remove age‑identifying information such as age, date of birth, or dates of school attendance or graduation. You will not be penalized for redacting or removing this information.