Global Privacy Lead

Block is one company built from many blocks, all united by the same purpose of economic empowerment. The blocks that form our foundational teams — People, Finance, Counsel, Hardware, Information Security, Platform Infrastructure Engineering, and more — provide support and guidance at the corporate level. They work across business groups and around the globe, spanning time zones and disciplines to develop inclusive People policies, forecast finances, give legal counsel, safeguard systems, nurture new initiatives, and more. Every challenge creates possibilities, and we need different perspectives to see them all. Bring yours to Block.

The Role

We are looking for a Global Privacy Lead (often referred to as a Chief Privacy Officer) to lead Block’s global Privacy team. This role will manage Block’s Legal Privacy and Cybersecurity Program, which includes setting global strategy, interfacing with regulators and public policy decision-makers, designing, developing, and implementing policies, and guiding business and product teams to ensure compliance with privacy, data protection, and AI laws and best practices. This role will also oversee incident response programs and ensuring compliance with data privacy and data protection laws and regulations (in particular those related to highly-regulated financial technology requirements) across the globe. 

The ideal candidate will be a collaborative legal advisor and business partner, with an innovative, process-oriented and practical mindset, holding deep data privacy and protection expertise, and AI governance experience who is undaunted by regulatory complexity and thrives on tackling the challenges inherent in a fast-paced, high-growth tech environment. This leader will be able to successfully collaborate with stakeholders within Block, interface with key regulators, and work closely with legal, product, information security, engineering, policy, operations, and business teams.

You Will

• Oversee, develop, and scale the global Privacy program.
• Lead a global team of legal privacy, cybersecurity and AI governance professionals. 
• Develop an overarching regulatory strategy in collaboration with Product Counsel and  with cross-functional leaders.
• Develop and scale Block's enterprise privacy and risk infrastructure, which includes responding to regulatory examiners’ privacy legal requests. 
• Develop and enhance our existing privacy programs, policies, and procedures, and embed privacy and data ethics into Block’s culture, addressing all aspects necessary for a best practices compliance program, including training, communication and monitoring/auditing.
• Report to our Board and subsidiary Boards on privacy-related risks and programmatic development.
• Guide business leaders, in partnership with the Product Counsel team, and manage teams responsible for identifying, evaluating, and developing innovative solutions related to data privacy issues involving the design, marketing, development, and delivery of Block’s products and services.
• Oversee compliance with our incident response protocol, which includes scoping and performing data privacy and security risk assessments, mitigation, remediation, and reporting of data incidents.
• Advise on and manage your team in supporting strategic growth projects, including M&A, the creation of new business units, and other impactful initiatives or transactions.
• Be a thought leader for the Counsel leadership team, contributing to legal strategy, company priorities, and team development.

You Have

• 12+ years of combined experience in law firms, governmental agencies, or in-house legal departments, with a minimum of 5 years leading an enterprise risk management or  global privacy program at a technology company and/or financial institution. 
• Extensive knowledge of global privacy, cybersecurity, AI laws, frameworks, and best practices.
• JD required, with a license and active membership to practice in at least one U.S. state.
• lAPP Certifications including CIPP/US and/or CIPP/E. CIPT and/or CIPM a plus.
• Strong technical knowledge and extensive experience in the technology industry, with experience in financial technology preferred. 
• Experience managing a global team, including strategic planning, career development, and resource allocation.
• Experience and skill at drafting and implementing policies and guidance documents, conducting investigations, and developing scalable processes.
• Experience engaging with regulators (including EU data protection authorities), law makers, and external organizations on complex privacy matters.
• Demonstrated ability to lead, learn quickly, prioritize multiple urgent tasks, take action, and provide clear direction in the face of ambiguity.
• Ability to simplify complex issues and provide pragmatic advice and practical solutions that can be operationalized.
• Team mindset, with ability to build strong relationships, and work collaboratively within a growing legal team and cross-functionally with members at all levels of the organization.