Managing Attorney – Technology Compliance & Digital Responsibility

Managing Attorney – Technology Compliance & Digital Responsibility

Requirements

• J.D. required. Licensed to practice law in the jurisdiction in which the attorney is located.
• Preferably at least 15 years of legal experience, preferably some in-house, with at least 5 years of experience in a combination one or more of the following areas: privacy, data protection, artificial intelligence, digital marketing, cybersecurity, and digital operational resilience.
• Demonstrated ability to effectively manage complex projects and programs, and proven track record of leading complex projects to effective execution.
• Customer-focused, commercial-oriented, and innovation mindset.
• Comfortable translating complex legal requirements into operational controls for business and technology teams.
• Excellent judgment and decision-making skills.
• Demonstrates strong aptitude for evaluating a range of risks and effectively communicating relevant impact to business owners.
• Driven team-player motivated by bringing colleagues and stakeholders together to maximize successful outcomes. Prioritizes teamwork and team-based success. Appreciates, respects, and leverages diverse perspectives.
• Excellent verbal and written communication skills.
• Persuasive, influential negotiator.
• Prior experience with regulatory outreach and advocacy and participation in industry and trade groups.
• Comfortable with change and ambiguity.
• Open-minded and preferably a change agent.
• Demonstrated ability to regularly adjust and re-prioritize to meet multiple stakeholder and organizational needs as well as an ever-evolving regulatory landscape.
• Passionate about technology, data, and data-driven.
• Very comfortable with technology.
• Willingness to engage deeply with technology, data, and product teams on data and technology matters.
• Comfortable communicating with prospects, customers, and other constituents about data, technology, and compliance.
• Outcomes-oriented.
• Strives not only to get things done well, but to demonstrate the value of contributions.

Responsibilities

• Serves as the lead regulatory attorney to the D&B Technology organization, advising on the application of regulatory requirements to systems, applications, infrastructure, and digital service providers.
• Partners with GSR and other Technology teams to oversee regulatory accountability for Dun & Bradstreet ICT systems, ensuring that they meet applicable regulatory requirements and can be effectively integrated into compliance reviews.
• Partners with Technology teams to oversee data transfer and data residency requirements for D&B ICT Systems and infrastructure, including cloud service providers, and advises commercial and functional leaders on key issues.
• In coordination with GCE Program and Operations, manages the GCE Systems compliance register in alignment with enterprise configuration management databases and asset inventories. Establishes and continually improves its risks and controls standards, including for artificial intelligence and other emerging digital technologies.
• Partners with the GCE Data and Product Compliance COE to ensure that regulatory considerations for technology systems are evaluated and documented consistently across products, solutions, scores and analytics.
• Leads regulatory reviews and oversees policies and standards for cookies and other digital tracking technologies, including D&B solutions based on these technologies.
• Partners with Sales, Alliance and other Commercial Team Members, GSR, and Third Party Compliance to address regulatory and compliance issues related to the technology components of the engagements.
• In coordination with the GCE lead regulatory readiness attorney, the European Regulatory Affairs and Public Policy leader, the CECO, and other COEs, leads the regulatory readiness and compliance initiative efforts for the following types of laws and regulations from horizon scanning to industry association engagement to leadership and functional briefings to customer training and engagement: Artificial intelligence laws and regulations, Digital operational resilience laws and regulations, Cybersecurity laws and regulations, Biometrics laws and regulation, Other applicable technology-related laws and regulations.
• As a member of the GCE Leadership Team, leads, monitors, and reports on certain key annual global roadmap initiatives supporting the continuous program of the GCE program, Legal department objectives, joint objectives with Technology, and sustainable growth with integrity at D&B.
• Partners with the European Group DPO, Technology, GCE Corporate Compliance COE, and GSR on incident and breach response involving systems and technology issues, and supports the remediation, retrospective analysis, and risk management of those issues.

Preferred Qualifications

• Undergraduate or masters level degree in business, technology, or science preferred.
• Additional relevant certifications, such as AIGP, CIPP/E, CIPM, or CIPT, preferred but not required.
• Experience with ethical decision-making, values-oriented compliance, and supporting a culture of compliance preferred.
• Risk management experience preferred.
• Agile, scrum, lean six-sigma or other operational excellence experience a plus.