Legal Counsel, Privacy & Data Protection

Our Purpose

Mastercard powers economies and empowers people in 200+ countries and territories worldwide. Together with our customers, we’re helping build a sustainable economy where everyone can prosper. We support a wide range of digital payments choices, making transactions secure, simple, smart and accessible. Our technology and innovation, partnerships and networks combine to deliver a unique set of products and services that help people, businesses and governments realize their greatest potential.

Title and Summary

Legal Counsel, Privacy & Data Protection

Overview
• Mastercard is committed to balancing innovation while ensuring legal compliance and has embraced privacy and data protection as core to the successful execution of its business strategy. As part of that commitment Mastercard has established a world-class privacy and data protection program and is currently adding talent to its global team.
• The Counsel - Privacy & Data Protection will lead the development of cutting-edge fraud prevention and security technologies developed by the Security Solutions team. The position will report to the Senior Managing Counsel, Privacy & Data Protection and will be a member of the Global Privacy & Data Protection team.
• The Counsel must be abreast of new technologies related to payments, dispute resolution, and fraud. Ability to understand complex privacy and data protection laws, and to develop creative legal solutions at a global scale is key.
Core responsibilities
The Counsel - Privacy & Data Protection will support the Security Solutions team to ensure privacy and data protection law compliance is built into Mastercard fraud prevention and security solutions and products (“the Fraud Solutions”).
• Ensure that the Fraud Solutions comply with all global, regional and local privacy and data protection laws - including the GDPR, the CCPA/CPRA, the Brazil's LGPD; since the Fraud Solutions rely on AI, advise on any additional AI requirements.
• Advise on legal, business and technical infrastructure controls applying to the Fraud Solutions based on a strong Privacy-by-Design safeguards; work with legal, business, technical teams as well as coordinate with external counsel as necessary for the implementation.
• Provide day-to-day support to Security Solutions team as and when new questions arise and build supporting policies and processes to maintain compliance for the Fraud Solutions.
• Monitor new legislative developments impacting the Fraud Solutions globally and advise business teams on the potential impact of those developments.
• Support the engagement with key policy makers, regulators and other stakeholders in light of new legislative developments.
• Negotiate contracts with customers, partners and vendors relating to the Fraud Solutions.
• Increase awareness among business clients, the legal team and the Global Privacy & Data Protection Team regarding privacy and data protection requirements relating to the Fraud Solutions through company training and other initiatives.
All About You
• Law degree required. Membership to a Bar (if permitted by law). Any additional qualifications (e.g. Master of Laws degree, IAPP certification) considered an asset
• Solid expertise in and track record dealing with privacy and data protection laws globally; knowledge of AI related legal frameworks is a plus
• Good understanding of fraud and security technologies
• Familiarity with financial services industry and payment processing
• Experience in drafting and negotiation of data processing terms
• Ability to collaborate with various types of stakeholders (business, lawyers, third parties such as customers and vendors)
• Superior time management, planning, and organizational skills
• Strong analytic capabilities, and written and oral communication skills. Attention to detail is a must.
• Exceptional interpersonal skills with proven experience in relationship building and partnering. Must work well in both team and individual settings
• Ability to motivate and influence highly skilled professionals to achieve major organizational goals

Corporate Security Responsibility

All activities involving access to Mastercard assets, information, and networks comes with an inherent risk to the organization and, therefore, it is expected that every person working for, or on behalf of, Mastercard is responsible for information security and must:

• Abide by Mastercard’s security policies and practices;

• Ensure the confidentiality and integrity of the information being accessed;

• Report any suspected information security violation or breach, and

• Complete all periodic mandatory security trainings in accordance with Mastercard’s guidelines.