CBRE is seeking an experienced, high-performing and motivated data protection and privacy attorney to join CBRE's Global Data Privacy Office. The Counsel, Data Protection & Privacy - Americas position will provide legal risk assessment and compliance advice relating to Americas data protection and privacy law, including in connection with the development and maintenance of CBRE Group's Global Data Privacy and Protection Program. This individual will report into the Legal Director, Data Protection & Privacy - Americas. Responsibilities will be tailored at a high level to the requirements of US, Canadian and Latin American data protection and privacy law, as well as the GDPR. This role will require coordination across multiple regions and continuous engagement with various levels of the company's personnel, including senior members of HR, Legal, IT, and Compliance. This is an exciting opportunity to leverage your data protection and privacy knowledge, expertise and passion in a collaborative, fast-paced and engaging setting that continuously strives for excellence, compliance, and industry leadership at a dynamic time in privacy.
ESSENTIAL DUTIES AND RESPONSIBILITIES
Assess legal risks and advise managers, senior leaders and operational teams on matters involving the processing of personal data to help maintain compliant data protection and privacy practices across the Americas.
Perform data protection impact and privacy-by-design assessments and advise on and develop control frameworks to enable compliance with data protection and privacy laws, focusing on the Americas, while enabling the development of new technologies and execution of business initiatives.
Provide legal advice on compliance with CBRE's legal obligations in responding to data subject rights requests.
Develop and provide training to various business and operational teams regarding data protection and privacy compliance.
Develop and maintain data protection and privacy guidelines, playbooks, agreement templates, and other resources to enable and support compliance with Americas data protection and privacy laws.
Advise on new and emerging legal and regulatory developments impacting data privacy and data security, including identifying trends and potential impacts on emerging technologies and business activities.
Support merger and acquisition activities by conducting privacy compliance assessments.
Advise CBRE's Records Manager on legal retention and deletion requirements applicable to complex data flows across the data lifecycle and maintenance of records retention schedules.
Other duties as may be assigned.
EDUCATION, BAR ADMISSION and EXPERIENCE
Juris Doctorate (JD) from an accredited law school and graduation in the top 25% preferred.
License or authorization to practice law in New York, Illinois, or California and Bar membership in good standing with four to six years' experience, preferably in the area of data protection and privacy law.
Demonstrable data protection and privacy law and program management skills, with an emphasis on CCPA, LGPD, CAN-SPAM, HIPAA, GDPR, e-Privacy Directive, and other applicable laws strongly preferred.
Experience providing risk-based and pragmatic solutions to outstanding data protection and privacy compliance issues.
Knowledge of data and information governance and associated policies.
Knowledge of IT, web, and mobile technologies (especially those used in the collection, storage and analysis of data) and their privacy and data security implications preferred.
Knowledge of data science, analytics, and ethics preferred.
Demonstrated ability to work autonomously as well as part of a team while managing multiple priorities.
Experience working in-house at a large, multi-national corporation across multiple business lines and functions preferred.
Knowledge of the commercial real estate services business is helpful.
Team-focused work ethic that emphasizes respect and collaboration over management hierarchy.
Ability to translate legal advice into actionable policies, processes and programs and communicate complex data protection and privacy compliance obligations in a concise, straight-forward manner to non-lawyers both orally and in writing. Excellent oral presentation skills are required.
Ability to solve advanced problems and deal with a variety of options in complex situations. Draws upon the analysis of others and makes recommendations that have a direct impact on the Company. Ability to identify and respond effectively to sensitive issues.
OTHER SKILLS and/or ABILITIES
Intermediate skills with Microsoft Office Suite
This job description has been designed to indicate the general nature and level of work performed by employees within this classification. It is not designed to contain or be interpreted as a comprehensive inventory of all duties, responsibilities and qualifications required of employees assigned to the job.
Internal Number: 20000417
With broader and deeper capabilities than any other company, CBRE is the leading full-service real estate services and investment organization in the world.
CBRE Group, Inc. is the world’s largest commercial real estate services and investment firm, with 2017 revenues of $14.2 billion and more than 80,000 employees (excluding affiliate offices). CBRE has been included in the Fortune 500 since 2008, ranking #214 in 2017. It also has been voted the industry’s top brand by the Lipsey Company for 17 consecutive years, and has been named one of Fortune’s “Most Admired Companies” in the real estate sector for six years in a row. Its shares trade on the New York Stock Exchange under the symbol “CBRE.”
CBRE offers a broad range of integrated services, including facilities, transaction and project management; property management; investment management; appraisal and valuation; property leasing; strategic consulting; property sales; mortgage services and development services.