Counsel – Privacy, Cybersecurity, AI & Product Technology

This is a fully remote position, open to applicants in Maryland, +1 more state.

📋 Description

• Offer practical, business-focused legal counsel on privacy, cybersecurity, artificial intelligence, technology, consumer privacy, and product compliance initiatives.

• Function as an integrated legal partner to teams throughout the Americas and contribute to global governance initiatives.

• Independently manage appropriately scoped matters while collaborating with senior counsel on complex or enterprise-level issues.

• Recognize and mitigate legal risks in technology procurement, product development, commercialization, and customer interactions.

• Provide advice on privacy, data protection, cybersecurity, data governance, digital compliance, and responsible AI practices.

• Assist with the Consumer Privacy program, which includes notices, consent, preference management, consumer rights, retention, and marketing practices.

• Prepare, review, and maintain Privacy Impact Assessments (PIAs) and Data Protection Impact Assessments (DPIAs), as well as track mitigation measures.

• Utilize OneTrust for managing privacy intake, assessments, workflows, records, approvals, reporting, and compliance evidence.

• Conduct assessments related to privacy, security, and AI risks.

• Transform legal and regulatory requirements into controls, playbooks, contract positions, product specifications, and business guidance.

• Keep abreast of legal and regulatory changes across the Americas, supporting readiness planning, policies, standards, and training efforts.

• Aid in incident preparedness and response, including research, fact development, documentation, notification analysis, and coordination with relevant teams and outside counsel.

• Oversee AI governance intake, risk assessments, approvals, documentation, guardrails, and monitoring activities.

• Collaborate on technology vendor intake, due diligence, sourcing, negotiation, onboarding, and lifecycle management.

• Review, draft, and negotiate technology contracts, including SaaS, cloud, software, professional services, data processing, cybersecurity, AI, licensing, statements of work, and confidentiality agreements.

• Support and lead customer-facing commercial negotiations concerning technology products, digital services, connected products, data usage, cybersecurity, privacy, AI, audit rights, regulatory commitments, and risk management.

• Implement contracting playbooks, identify higher-risk positions, develop alternatives, and present recommendations.

• Create reusable clauses, guidance, checklists, and training materials.

• Advise product, engineering, digital, cybersecurity, marketing, sales, quality, and regulatory teams on legal requirements related to connected products.

• Manage product development and go-to-market evaluations involving privacy by design, security by design, AI features, transparency, data usage, connectivity, software, digital services, and product claims.

• Evaluate product compliance obligations across markets in the Americas and coordinate with specialized counsel.

• Review product documentation, disclosures, notices, terms, instructions, approvals, and compliance evidence.

• Facilitate issue escalation and remediation efforts.

• Act as a legal partner to business teams across the United States, Canada, Latin America, and the Caribbean.

• Foster relationships with regional legal, commercial, procurement, digital, product, IT, cybersecurity, privacy, and compliance stakeholders.

• Provide practical education and localized guidance that reflects regional laws, languages, business contexts, and global standards.

• Prioritize regional matters and escalate complex, novel, or high-risk issues.

⛳️ Requirements

• Juris Doctor or equivalent law degree.

• Authorization to practice law in at least one relevant jurisdiction.

• Approximately 5–10 years of progressively responsible legal experience.

• Background in multiple areas, including privacy and data protection, cybersecurity, technology transactions, AI governance, commercial law, consumer privacy, product compliance, or connected products.

• Experience in preparing, reviewing, and documenting Privacy Impact Assessments (PIAs) and Data Protection Impact Assessments (DPIAs).

• Proven ability to identify and monitor appropriate mitigation measures.

• Hands-on experience using OneTrust.

• Capacity to analyze intricate legal and technical information and provide commercially practical guidance.

• Strong skills in legal research, drafting, negotiation, project management, organization, and both written and verbal communication.

• Demonstrated sound judgment, ownership, responsiveness, and awareness of escalation needs.

• Ability to collaborate across various functions, cultures, time zones, and levels of seniority.

• Professional fluency in English and Spanish and/or Portuguese.

🏝️ Benefits

• Medical insurance.

• Dental insurance.

• Life insurance.

• Vision insurance.

• Disability benefits.

• 401(k).

• Employee Stock Purchase Plan.

• Paid time off, including paid vacation, holidays, and personal days.

• Tuition reimbursement.

• Wellness program.

• Discounts on Stanley Black & Decker tools and products.

• Discounts through partner and vendor programs.

• Career development opportunities across multiple career paths.

• Access to a digital learning portal.

• Lean Academy and online university.

• Certificates and specializations from renowned colleges and universities.

• Opportunities for volunteerism, giving back, and engaging in sustainable business practices.