Responsibilities: 

• Guiding business leaders and effectively counseling multiple business partners in a matrix organization on data privacy and data security legal requirements on information security and technology initiatives.  

• Serving as a key subject matter expert and advisor to PayPal lawyers and advising key functional areas and regional business units on data security requirements. 

• Ensuring adherence to global data security and information security laws, while enabling the development and execution of data driven business initiatives.  

• Providing legal guidance on the company’s global data security and technology infrastructure programs and providing support to our product, platform and technology teams around implementation, maintenance and compliance with data security obligations.   

• Supporting the Chief Information Security Officer, Chief Technology Officer, and Chief Information Officer organizations, including drafting and/or reviewing applicable security and technology policies, standards and programs to ensure adherence to global data security and technology legal requirements.   

• Coordinating with local lawyers in-country to evaluate and, where appropriate, help design products, services and technologies for compliance with local data security regulations.  

• Working with Compliance colleagues, including PayPal’s Data Protection Officer, in developing and providing business partners general and targeted data security counseling and training.  

• Advising on legal and regulatory developments impacting data privacy and data security, including identifying trends and potential impacts on the business’s data security risk management activities.  

• Managing potential liability and other legal aspects related to data security incidents and supporting the company’s incident response program, including investigating potential incidents, identifying applicable legal obligations, and supporting incident response and any remediation activities.  

• Advising on responses to regulatory inquiries on data security issues, in coordination with local legal, compliance and other stakeholders as appropriate.  

• Managing outside counsel and third-party consulting firms on discreet data security projects, as needed.  

• Contributing legal expertise on data security matters as part of due diligence activities around business partners, services providers and other partnerships and ventures. 

Skills & Experience:  Candidates for this position should be able to demonstrate experience and competence with the following. 

• In-depth knowledge of cutting edge IT, web, mobile, and payment ecosystem technologies (especially those used in the collection, storage and analysis of data) and their privacy and data security implications.  

• Deep understanding of cybersecurity, authentication, and network monitoring and security legal requirements, as well as data security frameworks, e.g. NIST, PCI-DSS, NY DFS 500, PSD2, etc. 

• Experience providing practical advice to clients on data use and protection issues. 

• Familiarity with, and strong interest in, financial services technology, mobile and alternative payments, as well as emerging technology. 

• Ability to thrive in a fast-paced environment and to tolerate change and ambiguity.  

• Responsible and pragmatic with a passion to solve complex problems, that will often be matters of first impression, in a creative and effective way and to translate global legal and regulatory initiatives into actionable policies, processes and programs that enable business objectives. 

• Facility with a team-based approach to subject matter management and knowledge sharing, and comfort with a flexible, agile environment that emphasizes collaboration and team performance over management hierarchy.   

• The successful candidate will enthusiastically partner with PayPal colleagues across our global organization and be able to build positive relationships across our organization, engage with business leaders, execute priorities and have fun! 

Qualifications:  In addition to the above Skills & Experience, candidates should possess the following qualifications. 

• 12 or more years of experience practicing either in-house (or in an equivalent setting) or at a reputable law firm. 

• Juris Doctorate or equivalent degree.  Admitted to a state bar. 

• Exceptional writing skills, with attention to detail and ability to generate creative original drafted documents. 

• Excellent communication and presentation skills; ability to communicate and help non-experts understand applicable regulations and requirements.  

• Results oriented, proactive, responsible and pragmatic with a passion to solve complex problems in a creative and effective way and to translate global compliance environments into actionable policies, processes and programs that enable business objectives. 

• Relevant technical certifications, such as a Certified Information Security Manager (CISM), Certified Information Systems Security Professional (CISSP), or Certified Information Privacy Professional (CIPP) or other relevant certifications offered by the International Association of Privacy Professionals preferred.