Privacy Counsel
Who we are
About Stripe
Stripe is a financial infrastructure platform for businesses. Millions of companies—from the world’s largest enterprises to the most ambitious startups—use Stripe to accept payments, grow their revenue, and accelerate new business opportunities. Our mission is to increase the GDP of the internet, and we have a staggering amount of work ahead. That means you have an unprecedented opportunity to put the global economy within everyone’s reach while doing the most important work of your career.
About the team
The Privacy Legal team at Stripe tackles complex privacy issues that intersect with Stripe's cutting-edge technology. Beyond solving interesting privacy challenges day-to-day, we constantly work to scale and improve our privacy program, which serves as a foundation for maintaining the trust our users place in us with their data and ensuring Stripe's privacy compliance. We're seeking a technical and process-oriented lawyer with a passion for data, technology, privacy, and security. In this role, you will be responsible for a wide variety of privacy matters supporting Stripe's growing business and will contribute to building our program for scale. Join us, and you will have the opportunity to work with a team of talented privacy lawyers and solve intricate problems in a fast-paced environment.
What you’ll do
Responsibilities
- Partner closely with cross-functional teams (e.g., Product, Engineering, Security, Data Science) to assess potential privacy and security risks for Stripe's products and operational processes and design mitigative measures
- Develop, enhance, and implement Stripe's privacy infrastructure, policies, and procedures to effectively scale privacy throughout the organization and embed privacy-by-design principles in Stripe's product development lifecycle and operational processes
- Oversee and manage privacy compliance functions, including Stripe's processes for conducting Data Protection Impact Assessments (DPIAs), responding to Data Subject Access Requests (DSARs), and maintaining Records of Processing Activities (ROPAs) to ensure compliance with applicable privacy regulations
- Manage and coordinate the response to privacy and security incidents, collaborating closely with cross-functional teams to assess and mitigate risks, ensure compliance with data breach notification requirements, and develop and implement effective resolution strategies
- Support commercial transactions by negotiating and drafting Data Processing Agreements (DPAs) and other privacy-related contractual provisions, ensuring compliance with applicable data protection laws while facilitating business objectives.
- Help build Stripe’s compliance program for AI and ML
Who you are
We're looking for someone who meets the minimum requirements to be considered for the role. If you meet these requirements, you are encouraged to apply. The preferred qualifications are a bonus, not a requirement.
Minimum requirements
- J.D. degree (or foreign equivalent) with membership in at least one US state bar
- Minimum of 4 years of experience as a privacy lawyer, with extensive knowledge of global privacy laws and regulations, including GDPR, CCPA, and GLBA
- A robust understanding of tech environment and a demonstrated ability to converse with software engineers in depth about the ways Stripe collects and processes data
- Experience managing data security incidents and familiarity with data breach notification requirements
- Proficiency in negotiating and drafting complex contracts involving privacy and security
- Strong organization and project management skills with the ability to work well on both long and short-term projects
- Excellent written and oral communication skills
Preferred qualifications
- The ability to make prudent judgment calls in ambiguous situations that balance data protection needs with Stripe’s business interests
- The ability to drive consensus among cross-functional stakeholders and ensure successful implementation of decisions
- Proactive, hands-on attitude with a sense of urgency and ability to maintain a positive outlook with a sense of humor
- A skilled advisor and negotiator who can actively work with the business and commercial teams to engineer pragmatic solutions
- A team player who is willing to pitch in where needed in a fast-paced, growing company
- An exceptionally hard worker, capable of getting things done as well as strong interpersonal and people management skills
Working remotely at Stripe
A remote location, in most cases, is defined as being 35 miles (56 kilometers) or more from one of our offices. While you would be welcome to come into the office for team/business meetings, on-sites, meet-ups, and events, our expectation is you would regularly work from home rather than a Stripe office. Stripe does not cover the cost of relocating to a remote location. We encourage you to apply for roles that match the location where you currently or plan to live.
Pay and benefits
The annual US base salary range for this role is $173,800 - $260,700. For sales roles, the range provided is the role’s On Target Earnings ("OTE") range, meaning that the range includes both the sales commissions/sales bonuses target and annual base salary for the role. This salary range may be inclusive of several career levels at Stripe and will be narrowed during the interview process based on a number of factors, including the candidate’s experience, qualifications, and location. Applicants interested in this role and who are not located in the US may request the annual salary range for their location during the interview process.
Additional benefits for this role may include: equity, company bonus or sales commissions/bonuses; 401(k) plan; medical, dental, and vision benefits; and wellness stipends.