Director, Corporate Counsel

Responsibilities

• Lead and develop a team of talented, high-performing privacy legal professionals and serve as a point of escalation, providing privacy and data protection legal expertise to executives, cross functional leaders and other stakeholders throughout the organization.
• Provide advice and guidance to Okta Security, Engineering, Product, executives and other stakeholders on compliance with applicable privacy and data protection laws and regulations, such as the General Data Protection Regulation, United States’ federal and state regulations, privacy by design, frameworks and industry certifications.
• Provide advice negotiating privacy and data protection terms associated with Master Subscription Agreements, Data Processing Addendums and other documentation related to customer and vendor transactions.
• Provide day-to-day legal support on privacy and data protection-related questions and respond promptly and effectively with pragmatic, business-oriented guidance.
• Support the investigation of potential privacy incidents, including analyzing relevant regulatory responsibilities and contractual obligations.
• Develop, implement and maintain privacy and data protection policies, procedures, standards, processes, runbooks, certifications and guidance.
• Build critical relationships in order to effectively provide practical and strategic advice to assist the business in meeting its objectives, while ensuring privacy and data protection compliance.
• Maintain an understanding of technical controls and assist in the creation of audit and monitoring frameworks to support stable, controlled operations.
• Review privacy-related marketing and other external communications content for accuracy and completeness.
• Strategically manage outside counsel relationships, including staffing, strategy, work product, day-to-day activity and budgets.

Required Skills and Experience

• 10+ years of relevant in-house and/or law firm experience as a practicing attorney, including at least 5 years of experience specializing in privacy and data protection, preferably at a SaaS technology company.
• Ability to translate complex privacy and data protection issues into clear and straightforward legal guidance, communicate effectively with non-legal internal colleagues and support and inspire innovation across the business.
• Familiarity and comfort with the culture of a fast-paced enterprise software company and knowledge of SaaS products.
• Experience working with highly-regulated customers, preferably those in the financial services industry.
• Excellent written and verbal communication, presentation, drafting and negotiation skills.
• Sound and practical legal and business judgment, as well as the ability to think strategically and develop strong working relationships with key internal clients.
• Strong knowledge of privacy and data protection frameworks, including, GDPR, CCPA, CPRA, HIPAA, NIST, ISO, FedRAMP and PCI-DSS.
• Proven track record managing and overseeing a team of privacy legal professionals, preferably at a global company.
• Ability to maintain strong working relationships with a variety of internal stakeholders and business partners from a variety of functions.
• A self-motivated individual with grit who takes initiative and is comfortable rolling up their sleeves. Team-oriented with a sense of humor and high emotional intelligence. Results-driven with the ability to organize, prioritize and manage deadlines.
• Strong academic background and J.D. from highly-regarded school, active bar admission.