Attorney, Product Compliance

Essential Key Responsibilities

• Providing regulatory, compliance and ethics guidance related to privacy and data protection, artificial intelligence, data sourcing, acceptable use, data transfer and localization, data minimization, content restrictions, advertising and sales, data and records retention, data security, and accessibility requirements as it relates to D&B’s Global Products and Solutions.
• Supporting the Data and Product COE as a regulatory attorney for D&B’s Global Products and Solutions with an emphasis on U.S. Federal and State Privacy and Data Protection Laws, Consumer Protection Laws, and FTC Compliance.
• Working closely with the GCE Program and Operations team to ensure records of processing and applicable impact assessments are completed with comprehensive documentation of data flows, risks, controls, and remediations.
• Product Compliance responsibilities include close coordination and relationship building with many cross-functional business partners from Product, Data & Analytics, Marketing, and Technology.
• Effective coordination with the North American corporate legal affairs team members on data, product, and privacy considerations in commercial contracting, promotional materials, and other go-to-market matters.

Education and Experience

• Bachelor's degree required with 4 to 7 years of relevant experience
• Master's degree preferred

Essential Skills and/or Certifications

• JD with at least 4 years of legal experience, preferably some in-house, with at least 2 years of experience in one or more regulatory disciplines such as privacy, data protection, data and product compliance, or responsible AI governance.
• Licensed to practice law in the jurisdiction in which the Attorney is based.
• Additional relevant compliance qualifications and certifications, such as CIPP/US, CIPP/E, CIPM, CIPT, or AIGP preferred but not required.
• Experience with digital marketing products and regulatory landscape a plus.
• Experience with B2C data products and solutions, consumer data, and consumer protection a plus.
• Experience working in a highly regulated business or under robust regulatory oversight as well as some experience with export controls and other aspects of trade compliance and AI or Machine Learning preferred.
• Strong technical background and understanding. Ability to collaborate with engineering and product stakeholders to understand system architecture, document data flows, and coordinate with security teams to understand, address, and document security controls.
• Customer-focused, commercial-oriented, and innovation mindset. Able to translate legal issues into practical advice with commercial awareness of strategic objects beyond the legal technicalities.
• Comfortable translating complex legal requirements into operational controls for business and technology teams.
• Excellent judgement and decision-making skills. Takes ownership of tasks, seeking guidance and input from others as appropriate. Keeps colleagues informed and manages expectations.
• Demonstrates a strong aptitude for evaluating a range of risks and effectively communicating relevant impact to business owners.
• Driven team-player motivated by bringing colleagues and stakeholders together to maximize successful outcomes.
• Prioritizes teamwork and team-based success.
• Excellent verbal and written communication skills. Persuasive, influential negotiator.
• Prior experience with regulatory outreach and advocacy and participation in industry and trade groups a plus.
• Demonstrated ability to effectively manage complex projects and programs. Effectively uses technology and other resources to achieve the most efficient delivery.
• Comfortable with change and ambiguity. Open-minded and preferably a change agent. Demonstrated ability to regularly adjust and re-prioritize to meet multiple stakeholder and organizational needs as well as an ever-evolving regulatory landscape. Responds positively to change and new challenges and can be flexible when required.
• Passionate about data and data-driven. Comfortable communicating with prospects, customers, and other constituents about data and compliance.
• Outcomes-oriented. Strives not only to get things done well, but to demonstrate the value of contributions.
• Experience with ethical decision-making, values-oriented compliance, and supporting a culture of compliance preferred.
• Risk management experience preferred.
• Agile, scrum, lean six-sigma or other operational excellence experience is a plus.