Counsel, Privacy & Cybersecurity

WORK MODEL

WHAT YOU WILL DO

Provide Privacy advice and counsel to the business and work with the Privacy Office in the development, implementation, maintenance of, and adherence to the company’s policies and procedures regarding the privacy of, and access to, company confidential information, including consumer and employee personal information.  Provide cybersecurity (vehicle or enterprise) legal counsel to the company.  The position will also provide privacy impact assessments and contract negotiations for business developments.  It will require familiarity with technology and information technology/security.

HOW YOU WILL MAKE AN IMPACT

• Partner in the implementation, maintenance and adherence to the company’s privacy strategy and program. 
• Assist in the implementation and maintenance of the California Consumer Privacy Act, California Privacy Rights Act, Virginia Consumer Data Protection Act, and other state and federal privacy legislation/regulation.
• Analyze Privacy Impact Assessments.
• Serve as privacy subject matter expert to the Company for all departments and appropriate entities.
• Support the company’s internal privacy awareness program. 
• Contribute towards the development, implementation, maintenance, and adherence to the company’s privacy strategy and program. Ensure that privacy practices are in place and compliant with applicable laws and industry-specific regulations.
• Maintain current knowledge of applicable federal and state privacy and cybersecurity legislation and regulation and monitor industry trends and advancements to ensure company adaptation and compliance.
• Assist with the analysis and coordinated response to legal process.
• Counsel business units, parent company, and affiliates on data privacy and cybersecurity legal requirements for HMA products and services, including Internet of Things (IoT) efforts such as vehicle telematics, mobile apps, and wearables.
• Provide cybersecurity legal and regulatory counsel to the company in order to mitigate risks associated with a cybersecurity or privacy breach.
• Monitor HMA's and GMA’s data usage including vehicle technologies, data usage rights, data ownership with partners, vendors and affiliates, online behavioral advertising, mobile device usage, social media, etc. Create data maps and support updates to same.
• Assist in corporate alignment to industry privacy and cybersecurity frameworks (ISO, NIST, including, without limitation, ISO 27001 & 27701 and CIS 18.
• Develop and maintain internal privacy policies.
• Manage third party data sharing including affiliate and dealer data sharing. 
• Support Vendor Risk Management program. 
• Support internal and external audit of company data practices and remediation of gaps. 
• Maintain knowledge of privacy practices across the company in order to better understand and isolate the risk of exposure or liabilities, develop practical preventive measures, and respond to information security incidents.
• Represent the company with trade associations, legislators, law enforcement, and think tanks.
• Assist in responding to inquiries from outside parties (e.g., government, NGOs, etc.).
• Assist with obtaining relevant Company privacy certifications and manage any applicable registrations with state and federal authorities.
• Assist with creation of regular privacy reports.
• Problem identification.
• Problem solving.
• Advice and counsel.

WHAT YOU WILL BRING TO THE ROLE

• Bachelor’s degree required.
• Juris Doctor degree required.
• Eight or more years of broad privacy and data protection, compliance, technical, information security, audit or legal experience.
• In-house experience is a plus.
• Excellent verbal and written communication skills to allow effective interaction with all levels of the organization. 
• Ability to work independently, work under pressure of deadlines, handle multiple priorities, and pay close attention to detail.
• Knowledge of IT, security and automotive/vehicle technologies a plus.
• Strong interpersonal skills and the ability to communicate with all levels within the organization.
• Strong organizational skills.
• Strong legal and factual analytical abilities.
• Ability to thrive in a team environment.
• Ability to perform in a fast-paced environment.
• Strong project management skills. 
• Must be a licensed attorney in the United States.
• One of the following certifications strongly preferred: Certified Information Privacy Professional/United States (CIPP/US) and/or Certified Information Privacy Technologist (CIPT) designation from the International Association of Privacy Professionals and/or Certified Information Systems Auditor (CISA) designation from ISACA.

WHAT HYUNDAI CAN OFFER YOU

• Compensation Range: $107,800 - $154,000 annual base salary
• Monthly Hyundai/Genesis vehicle lease allowance (including insurance and maintenance)
• Holiday Pay - the company shuts down with pay between Christmas and New Years.
• Vacation and sick time off
• Healthcare insurance (medical, dental, and vision)
• 401(K) company match
• Additional 401(K) Employer Enhanced Contribution program – eligible after 1 year of employment, in addition to the regular employer matching contribution
• Basic life insurance, short- and long-term disability
• Mental health, wellbeing, and employee assistance program
• Health advocate (coordinate care and services, assistance with claim and billing issues, understanding Hyundai benefits)

WHAT HAPPENS NEXT

Express your interest by submitting an application. Once your application is received, our recruiting team will review your application to see if you meet the basic and preferred qualifications listed on the job description. For more information on our hiring process please visit our How We Hire page.

OTHER DETAILS

• Physical requirements: Normal office duties.