Data Privacy Counsel - Digital & Technology

Job Description

JOB SUMMARY

CBRE's Global Data Privacy Office (GDPO) is seeking a highly motivated, data privacy attorney with experience in the field of information technology or cybersecurity to join our team. As part of Ethics & Compliance, the GDPO is accountable and responsible for designing and maintaining CBRE's global data privacy compliance strategy and framework. We regularly advise on legal and regulatory privacy compliance, create privacy-compliant policies, processes, guidelines and training, and work with business stakeholders to build a privacy culture and ensure the global privacy program is put into practice.

This instrumental role will focus on Privacy-by-Design and privacy engineering, work cross-functionally with CBRE's Digital & Technology, Legal, and Ethics & Compliance teams, advise on data protection and privacy issues facing the business globally, and work closely with GDPO teammates on global initiatives. The position reports to CBRE's Legal Director, Data Protection and Privacy - Americas and Digital & Technology.

ESSSENTIAL DUTIES AND RESPONSIBILITIES

• Assisting with maturing CBRE's Global Data Protection & Privacy Program with a focus on Information Technology, Electronic Data Governance, and Cybersecurity, including creating, maintaining and maturing policies and protocols with respect to Privacy-by-Design-and-by-Default and Data Governance, including, cross-border data transfer architecture, data classification, data security, data handling, data mapping, and storage limitation.
• Advising internal clients on implementing Privacy by Design, including risk mitigation measures relative to designing, adapting and/or configuring information technology products and systems in compliance with global privacy laws.
• Advising internal clients on risks arising from data processing and cross-border data transfers, including risks arising under Schrems II.
• Preparing legally required documentation such as Data Protection Impact Assessments, Privacy Notices, and data inventories and description of processing activities.
• Conducting privacy and security due diligence on third-party providers of information technology products processing personal data.
• Assisting with developing, maturing and sustaining the Privacy Engineers program, a network of employees in CBRE's Digital & Technology tasked with putting Privacy by Design into practice, as well as assisting with developing and maintaining data inventories, records of processing activities and data mapping.
• Monitoring new and existing data protection and privacy regulations and legislation to measure, maintain and mature CBRE's privacy policies, notices, standards and procedures to ensure on-going compliance and defensibility.

SUPERVISORY RESPONSIBILITIES

No formal supervisory responsibilities in this position. Provides informal assistance such as technical guidance, and/or training to coworkers. May lead project teams and/or plan, and supervise assignments of lower level employees.

QUALIFICATIONS

To succeed in this role, you must

• Be qualified to practice law in the US
• Have demonstrable subject matter expertise (preferably a minimum of three years) in global data privacy laws, including GDPR and CCPA (CIPP/E and/or CIPP/US preferred)
• Efficiently and effectively communicate complex legal topics and explain technology and cybersecurity products and related risks to non-subject matter experts
• Demonstrate strong strategic risk assessment and operational effectiveness
• Effectively prioritize program and business-as-usual workstreams and efficiently manage time and resources
• Demonstrate perseverance, resilience and ability to adapt to a rapidly changing business environment, available resourcing, and legal regimes
• Be able to work flexibly to accommodate other time zones when necessary
• Have a pragmatic, risk-based approach to data privacy compliance
• Be team-focused with a passion for learning, excellence and continuous improvement
• Demonstrate respect and integrity in working with others at all levels of the business
• Be able to resolve conflicts with others in a professional and productive manner

EDUCATION and EXPERIENCE

Juris Doctorate with a minimum of 5 years of in-house or private practice experience.

CERTIFICATES and/or LICENSES

Member of State Bar in good standing.

COMMUNICATION SKILLS

Excellent written and verbal communication skills. Strong organizational and analytical skills. Ability to provide efficient, timely, reliable and courteous service to customers. Ability to effectively present information.

FINANCIAL KNOWLEDGE

Requires advanced knowledge of financial terms and principles. Ability to calculate intermediate figures such as percentages, discounts, and commissions. Conducts advanced financial analysis.

REASONING ABILITY

Ability to comprehend, analyze, and interpret complex documents. Ability to solve problems involving several options in situations. Requires advanced analytical and quantitative skills.

OTHER SKILLS and ABILITIES

Ability to work independently, manage multiple tasks and set priorities with excellent follow-up skills and organization. Some litigation background helpful, as well as experience in supervising outside counsel and monitoring litigation.

SCOPE OF RESPONSIBILITY

Decisions made with thorough understanding of procedures, company policies, and business practices to achieve general results and deadlines. Responsible for setting work unit and/or project deadlines. Errors in judgment may cause short-term impact to department.

CBRE is an equal opportunity/affirmative action employer with a long-standing commitment to providing equal employment opportunity to all qualified applicants regardless of race, color, religion, national origin, sex, sexual orientation, gender identity, pregnancy, age, citizenship, marital status, disability, veteran status, political belief, or any other basis protected by applicable law.

CBRE is an equal opportunity/affirmative action employer with a long-standing commitment to providing equal employment opportunity to all qualified applicants regardless of race, color, religion, national origin, sex, sexual orientation, gender identity, pregnancy, age, citizenship, marital status, disability, veteran status, political belief, or any other basis protected by applicable law.

NOTE: An additional requirement for this role is the ability to comply with COVID-19 health and safety protocols, including COVID-19 vaccination proof and/or rigorous testing.