Assistant General Counsel, Privacy & Data Protection

Why Mobility Global?

At Mobility Global, our mission is to provide the trusted information that helps billions of people build, sell, and own vehicles with confidence. As we shape the next generation of automotive intelligence through innovation, AI, and industry-leading data, we're creating new opportunities for our customers, our business, and our people.

Join a team singularly focused on transforming the automotive industry. S&P Global Mobility is Mobility Global — the company behind CARFAX, automotiveMastermind, Market Scan, and Polk Automotive Solutions. Our strength comes from our people, and here, the progress you make helps the entire automotive ecosystem move faster and with greater confidence.

Assistant General Counsel, Privacy & Data Protection

Join a best-in-class global legal and compliance team committed to delivering timely, practical and actionable advice to advance our business and safeguard our reputation, people, and assets.  This position reports directly to the Associate General Counsel, Head of Privacy, Data and AI who reports to the Chief Compliance, Privacy and Risk Officer.   

Responsibilities and Impact: The Assistant General Counsel, Privacy & Data Protection is responsible for supporting a business of approximately $1.8 billion in revenue and ~3,500 employees world-wide, providing legal, strategic and risk management advice on a wide variety of global privacy, AI and data protection matters. This leader will provide guidance, subject matter expertise and support across the organization on cyber and data incident response and commercial and vendor contracting. The ideal candidate brings deep knowledge of global privacy and data laws, strong business judgment, and the ability to translate legal and regulatory requirements into practical, scalable solutions that enable innovation while managing risk.

What's in it for you: 

• Work in a dynamic, fast-paced, client-facing environment

• Partner closely with colleagues across the business, including security, compliance, procurement, product, and commercial teams, advising on contracting, initiatives, new products and features, incident response and enterprise-wide privacy and data strategy.

• Design and translate legal and regulatory requirements into practical, scalable solutions that enable innovation while managing risk.

• Serve as a business-oriented, senior legal advisor and core member of the team, counseling on issues of significant importance to the company.

Responsibilities:

Privacy, Data & AI Advice

• Act as a subject matter expert on privacy and data protection, providing practical, timely, and strategic legal advice across the business.

• Proactively monitor and assess emerging privacy, cybersecurity, and AI regulations (horizon scanning), advising on their potential business impact and readiness planning.

• Influence the strategic implementation of privacy and data protection requirements across products, services, and internal operations.

• Identify problems and support solutions-based practices by using existing precedents or procedures, including creating legal gap analysis of new data protection laws and regulations. 

Data Protection & Incident Response

• Support and drive incident response efforts, including on breach notification, investigations, eDiscovery and regulatory exposure.

• Provide guidance to the IT and InfoSec team on data protection matters.

Negotiation of Data Protection Addendums & Similar Contractual Terms

• Maintain and draft contract template language related to data privacy, data protection, and information governance across the enterprise, including vendor, commercial, and M&A contracts. 

• Provide privacy guidance and support to commercial, corporate and procurement attorneys on the negotiation of commercial and vendor DPAs.

• Work with various stakeholders across the company to ensure controls, such as vendor due diligence controls, are compliant with applicable law. 

Global Privacy Program & Compliance Partnership

• Lead or support global privacy program initiatives, including the development, implementation, and improvement of policies, procedures, standards, templates, and playbooks.

• Draft, review, and maintain internal privacy policies and procedures, as well as external privacy notices, consent language, and disclosures, collaborating and advising the Compliance team where applicable.

Regulatory & External Engagement

Training & Enablement

• Support the Compliance team on delivering effective privacy training and communications for legal and non-legal audiences across regions, functions, and levels.

• Promote a strong culture of privacy awareness and accountability throughout the organization.

What We’re Looking For:

Basic Required Qualifications:

• 5+ years of relevant experience (i.e., with a primary focus on privacy and data protection) gained at law firm and in-house (at a publicly traded company).

• Active bar membership in good standing in at least one U.S. jurisdiction (or equivalent foreign qualification), with ability to practice in the role’s location as required.

• Deep expertise in global privacy and data protection laws and frameworks, including GDPR/UK GDPR, U.S. state privacy laws (e.g., CCPA/CPRA), and other international regimes.

• Proven capability to manage high-volume, complex environments with sound judgment and adaptability. 

• Fosters inclusivity and manages emotions to achieve optimal business outcomes. Able to effectively pivot direction and collaborate across teams to meet strategic initiatives.

• Exceptional business judgment and legal issue identification skills, coupled with strong problem-solving abilities. Adept at articulating business needs and defining actionable strategies. Actively seeks input from diverse sources to ensure engagement and influence stakeholder buy-in at all levels.

• Excellent communication and interpersonal skills, with a demonstrated a passion for the business. Provides clear, concise advice, and creative solutions where necessary, on established timelines to meet business needs that appropriately manage risk.

• Operates autonomously while also being a collaborative team player who brings a positive, “can do” attitude to the workplace. Works effectively with other members of the legal and compliance team, internal clients, and cross-functional organizations to influence and develop strategic initiatives.

Additional Preferred Qualifications:

• Privacy or AI certifications a plus.

• Experience supporting data-intensive environments, data/technology-driven products, digital platforms, or AI-enabled services.

• Experience with change management.

• Experience leading or supporting transformation initiatives or high-growth environments

The anticipated annual base salary range for this position is $147,000 - $221,000. Actual compensation within this range will be determined based on a variety of factors, including geographic location, relevant experience, skills, qualifications, and internal equity considerations. 

Mobility Global is committed to providing competitive compensation that reflects local market conditions and individual contributions. In addition to base salary, employees may be eligible for incentive compensation, long-term incentives, and a comprehensive benefits package, where applicable. 

What’s In It for You

• Competitive compensation package, including base salary and incentive opportunities where applicable.

• Comprehensive health and wellness benefits for employees and eligible dependents.

• Retirement savings programs, including company matching contributions where available.
   

Equal Opportunity Employer

Mobility Global is proud to be an Equal Opportunity Employer. We value diverse perspectives and are committed to fostering an inclusive workplace where everyone is respected, supported, and empowered to succeed. We provide reasonable accommodations throughout the hiring process and employment for qualified individuals with disabilities.

Recruitment Fraud Alert

Mobility Global will never ask candidates to pay money at any stage of the hiring process, including for applications, interviews, background checks, training, or equipment. If you receive a suspicious communication or request for payment or personal financial information, please exercise caution and report it immediately.