Senior Counsel - Privacy & Data Protection

We work to connect and power an inclusive, digital economy that benefits everyone, everywhere by making transactions safe, simple, smart and accessible. Using secure data and networks, partnerships and passion, our innovations and solutions help individuals, financial institutions, governments and businesses realize their greatest potential.

Our decency quotient, or DQ, drives our culture and everything we do inside and outside of our company. Overview • Mastercard is committed to balancing innovation while protecting individual privacy and has embraced privacy and data protection as core to the successful execution of our business strategy. As part of that commitment, Mastercard has established a world-class privacy program and is adding talent to our global team. • The Senior Counsel role will ensure compliance with credit risk and privacy and data protection laws while enabling data-driven innovation, with particular focus on supporting the Data & Services (“D&S”) organization within Mastercard. • The position will report to the Senior Managing Counsel, Privacy & Data Protection who provides global privacy support for D&S, and will serve as a member of both the Global Privacy & Data Protection team and the Law & Policy team. • The ideal candidate will have the ability to think and act both strategically and tactically with respect to the needs of business clients and their objectives while ensuring that the corporation remains compliant with credit risk and data protection laws and other laws relating to data as well as industry best practices in the credit risk area.

Role • Engage with business and legal stakeholders to conduct privacy by design reviews for new D&S products and services, including for products relating to credit risk. • Among other things, this involves advising on the intersection between privacy laws, credit reporting laws, and other data-related compliance requirements as they pertain to data analytics offerings, consulting services, marketing services, and other products developed by D&S—including developing business-friendly legal guidelines for these activities while following the Mastercard privacy by design process. • Identify business requirements resulting from new and evolving privacy and credit risk laws and regulations, and provide guidance and thought leadership on topics relevant to the D&S organization, including but not limited to alternative credit risk solutions, data anonymization, and the application of artificial intelligence capabilities to the credit risk and data analytics space. • Collaborate with other internal stakeholders on regional privacy analysis and advice relating to global D&S products and services, including helping design controls for data environments used to support credit risk analytics. • Monitor changing global laws relating to permissible use of credit data and regulatory registration requirements, facilitate the review of local requirements, develop internal legal guidelines to promote consistency in credit risk projects within Mastercard, and support the drafting and negotiation of credit-related and other data processing contract terms. • Educate the business on privacy and credit risk developments and controls for the further development of D&S products and services. • Where necessary, identify, document and update a range of stakeholders including executives on identified privacy and credit risk compliance gaps and recommended remedial measures. All About You • JD from an accredited law school and admitted to practice in the US. • Demonstrated experience advising companies in the credit risk analytics space on privacy, credit risk, and data-related issues. • Demonstrated familiarity with data analytics, computer science, and/or mathematics preferred. • Expertise in credit reporting laws and regulations, as well as global privacy and data regulatory laws and frameworks, including the GDPR and privacy principles that are common across global laws and regulations. • Demonstrated experience in relevant technologies including data anonymization, privacy enhancing technologies, and artificial intelligence, and familiarity with ethical frameworks, data governance, and accountability. • Familiarity with emerging technologies and associated credit risk and privacy implications. • Strong analytic capabilities and written and oral communication skills. • Exceptional interpersonal skills with proven experience in relationship building and partnering with legal, business, and technical colleagues. • Ability to motivate and influence highly-skilled professionals to achieve major organizational goals. • Familiarity with Privacy by Design methodologies. • Strong writing skills and ability to simplify technical material for other audiences, including business teams, legal departments, and regulators. • An understanding of the credit risk industry in general, accompanied by an ability to acquire a deep understanding of Mastercard products and services in this space. Corporate Security Responsibility All activities involving access to Mastercard assets, information, and networks comes with an inherent risk to the organization and, therefore, it is expected that every person working for, or on behalf of, Mastercard is responsible for information security and must: • Abide by Mastercard’s security policies and practices; • Ensure the confidentiality and integrity of the information being accessed; • Report any suspected information security violation or breach, and • Complete all periodic mandatory security trainings in accordance with Mastercard’s guidelines.