Senior Counsel, Privacy & Data Protection

Our Purpose

Mastercard powers economies and empowers people in 200+ countries and territories worldwide. Together with our customers, we’re helping build a sustainable economy where everyone can prosper. We support a wide range of digital payments choices, making transactions secure, simple, smart and accessible. Our technology and innovation, partnerships and networks combine to deliver a unique set of products and services that help people, businesses and governments realize their greatest potential.

Title and Summary

Senior Counsel, Privacy & Data Protection

Mastercard’s Privacy, AI and Data Responsibility team is a global, best in class team responsible for Mastercard’s compliance with applicable privacy & data protection laws and development and commercialization of data driven products in compliance with those laws. The Global Privacy, AI and Data Responsibility team at Mastercard ensures that privacy and data protection is integrated in Mastercard’s product design and business processes that collect, use, disclose or retain personal data about our customers, consumers, merchants and employees. The team also demonstrates its thought leadership for the protection of data with regulators, legislators and employees and advocates for strong external and internal standards for protecting that data.

The Senior Counsel will be a member of a team of Privacy, AI and Data Responsibility professionals to ensure privacy & data protection compliance while enabling data-driven innovation within the organization, and provide day-to-day privacy support to business teams within our Services organization. The role will also involve reviewing and advising on data-related laws in the region, and collaborating with other teams to ensure compliance with the requirements arising from these laws. The role will report to the Senior Managing Counsel, Privacy, AI and Data Responsibility.

Role:

• Engaging with business teams in our Services business, and supporting the development of products and solutions utilizing a privacy-by-design methodology
• Analyzing new and existing business initiatives that collect, store, analyze, manage, and transfer personal information with the aim of identifying relevant privacy and data usage issues and the relevant process and infrastructure requirements to ensure compliance of such initiatives with applicable privacy and data protection laws in the AP region and to ensure consistency with Mastercard’s global policies and standards
• Developing and implementing processes and controls that address applicable privacy and data protection requirements for the AP region including: access to data, managing privacy and data protection policies and notices, preparing and filing local regulatory registrations, and managing cardholder and government requests for data
• Reviewing data-related laws (new laws and changes to laws), and providing useful advice to business teams on the potential impact of these laws
• Increasing awareness among business clients and regional counsel colleagues regarding privacy and data protection laws in AP through training and other initiatives
• Supporting region business counsel with the review and negotiation of applicable privacy and data protection language in agreements with affiliates, vendors, and customers
• Engage with the organisation on privacy and data-related matters, e.g., through employee training and raising employee awareness about relevant regulatory or industry developments
• Ensuring all activities comply with applicable privacy and data protection laws

All About You:

• Law degree required
• Licensed to practice in one or more countries (if permitted by law)
• Any additional qualifications (e.g. CIPP certifications) is considered an asset
• Prior privacy and data protection related experience required
• Expertise with Privacy by Design methodologies
• Good understanding and track record of dealing with data protection laws and requirements for the protection and transfer of data in the AP region, including privacy compliance requirements
• Familiarity and legal experience with financial services industry and payment processing preferred
• Knowledge of relevant technologies including data anonymization, privacy enhancing technologies, and artificial intelligence, and familiarity with ethical frameworks, data governance, and accountability.
• Strong analytic capabilities and an ability to work on complex regulatory and business problems. Attention to detail is a must
• Solutions-oriented with a pragmatic and creative approach
• Capability and eagerness to dive-deep into the technology, and work with product and operations and technology teams when applying privacy principles
• Ability to motivate and influence highly-skilled professionals to achieve major organizational goals.
• Superior time management, planning, and organizational skills with an ability to excel at multi-tasking in a fast paced environment
• Exceptional interpersonal skills with proven experience in relationship building and partnering with legal, business and technical colleagues. Must work well in both team and individual settings
• Strong writing skills and ability to simplify technical material for other audiences, including business teams, legal departments, and regulators.

Corporate Security Responsibility

All activities involving access to Mastercard assets, information, and networks comes with an inherent risk to the organization and, therefore, it is expected that every person working for, or on behalf of, Mastercard is responsible for information security and must:

• Abide by Mastercard’s security policies and practices;

• Ensure the confidentiality and integrity of the information being accessed;

• Report any suspected information security violation or breach, and

• Complete all periodic mandatory security trainings in accordance with Mastercard’s guidelines.