Director, Managing Counsel-Privacy & Cyber Security

Director, Managing Counsel – Privacy and Cyber Security

Location:

Orrville Corporate Offices in Orrville, Ohio.

Work Arrangements:
Hybrid – onsite during core weeks as determined by the Company (estimated up to 9 days a month), with approximately 15% travel expectations.

The Director, Managing Counsel, Privacy and Cyber Security is responsible for the legal aspects of the Company’s privacy, cyber security and AI governance programs. This role coordinates with internal teams and experts to implement enterprise-wide risk management, privacy-by-design and security-by-design practices, and serves as a principal advisor to cross‑functional stakeholders across Corporate Communications, HR, Information Services, Innovation, Marketing, Procurement, and Products Research.

The individual leads privacy impact assessments, training, and policy development to maintain compliance with applicable domestic and foreign privacy and AI regulations, data protection, and cyber security requirements, and is a core member of the AI Governance Committee, cyber readiness and incident response teams, providing thought leadership on privacy and cyber security in strategic transactions. The role engages with outside counsel and vendors to ensure aligned, practical, and consistent execution across the organization.

• Perform administrative duties in connection with the company’s Privacy Office operations.
• Develop, update, and implement internal/external policies, standards, procedures and guidelines across privacy, data governance, and records compliance; draft and provide guidance on AI and privacy notices for business stakeholders.
• Design and deliver training for enterprise stakeholders on AI and privacy regulations, and data/cyber security obligations.
• Manage outside counsel work streams for AI, privacy, cyber security, and related matters.
• Monitor legal and regulatory trends and translate them into practical requirements.
• Lead updates on contractual and operational security requirements for our Data Privacy and Data Security Addendums, and AI Permitted Use Terms.
• Lead contract and transactional support for privacy and cyber security matters, including drafting, reviewing and negotiating Data Privacy and Data Security Addendums, AI Permitted Use Terms, SaaS/IT contracts, and privacy and security provisions in supplier and customer agreements.
• Support strategic acquisitions, divestitures, joint ventures, and due diligence activities for privacy/cyber/data governance issues.
• Execute digital governance programs and initiatives entailing drafting and publishing data management policies and playbooks, advising and counseling cross‑functional data stewardship teams, and participating in AI impact assessments.
• Provide leadership for Data/Cyber Security readiness, incident and data breach responses, and other operational support: participating in cybersecurity tabletop exercises; developing cyber/legal readiness cross disciplinary end‑to‑end process flows; reviewing and revising the company’s data breach communication plans; providing specialized advisory support for investigations and incidents; and maintaining contact with law enforcement agencies.
• Maintain other cyber/privacy incident governance artifacts, including the company’s data breach policy, cyber audit reporting processes, and related procedures and playbooks.
• Design and implement the company’s Privacy Impact Assessment (PIA) program.
• Advise on and monitor privacy compliance implementation across the company in consumer, employee/HR, and Canadian businesses, maintaining data workbooks, data maps, consumer and employee data subject access requests, and cookie management processes.

• Juris Doctorate degree from an accredited law school with strong academic credentials; and license to practice law in at least one state.
• 8+ years of experience working in a law firm or corporate legal department (or a combination of the two) in the areas of U.S. privacy law, data/cyber security law, and data transfer law, including substantial responsibility advising business stakeholders.
• Demonstrated experience leading cross‑functional privacy and/or cyber…