Job description
Who we are
About Stripe
Stripe is a financial infrastructure platform for businesses. Millions of companies—from the world’s largest enterprises to the most ambitious startups—use Stripe to accept payments, grow their revenue, and accelerate new business opportunities. Our mission is to increase the GDP of the internet, and we have a staggering amount of work ahead. That means you have an unprecedented opportunity to put the global economy within everyone’s reach while doing the most important work of your career.
About the team
The Privacy Legal team at Stripe tackles complex privacy issues that intersect with Stripe’s cutting-edge technology. Beyond solving interesting privacy challenges day-to-day, we constantly work to scale and improve our privacy program, which serves as a foundation for maintaining the trust our users place in us with their data and ensuring Stripe’s privacy compliance. We’re seeking a technical and process-oriented lawyer with a passion for data, technology, privacy, and security. In this role, you will be responsible for a wide variety of privacy matters supporting Stripe’s growing business and will contribute to building our program for scale. Join us, and you will have the opportunity to work with a team of talented privacy lawyers and solve intricate problems in a fast-paced environment.
What you’ll do
Responsibilities:
- Partner closely with cross-functional teams (e.g., Product, Engineering, Security, Data Science, GTM) to assess potential privacy and security risks for Stripe’s products and operational processes and design mitigative measures
- Develop, enhance, and implement Stripe’s privacy infrastructure, policies, and procedures to effectively scale privacy throughout the organization and embed privacy-by-design principles in Stripe’s product development lifecycle and operational processes
- Oversee and manage privacy compliance functions, including Stripe’s processes for conducting Data Protection Impact Assessments (DPIAs), responding to Data Subject Access Requests (DSARs), and maintaining Records of Processing Activities (ROPAs) to ensure compliance with applicable privacy regulations
- Manage and coordinate the response to privacy and security incidents, collaborating closely with cross-functional teams to assess and mitigate risks, ensure compliance with data breach notification requirements, and develop and implement effective resolution strategies
- Support commercial transactions by negotiating and drafting Data Processing Agreements (DPAs) and other privacy-related contractual provisions, ensuring compliance with applicable data protection laws while facilitating business objectives.
- Help build Stripe’s compliance program for AI and ML.
Minimum requirements:
- J.D. degree (or foreign equivalent) with membership in at least one US state bar
- Minimum of 6 years of experience as a privacy lawyer, with extensive knowledge of global privacy laws and regulations, including GDPR, CCPA, and GLBA
- A robust understanding of tech environment and a demonstrated ability to converse with software engineers in depth about the ways Stripe collects and processes data
- Experience managing data security incidents and familiarity with data breach notification requirements
- Proficiency in negotiating and drafting complex contracts involving privacy and security
- Strong organization and project management skills with the ability to work well on both long and short-term projects
- Excellent written and oral communication skills
Preferred Qualifications:
- The ability to make prudent judgment calls in ambiguous situations that balance data protection needs with Stripe’s business interests
- The ability to drive consensus among cross-functional stakeholders and ensure successful implementation of decisions
- Proactive, hands-on attitude with a sense of urgency and ability to maintain a positive outlook with a sense of humor
- A skilled advisor and negotiator who can actively work with the business and commercial teams to engineer pragmatic solutions
- A team player who is willing to pitch in where needed in a fast-paced, growing company
- An exceptionally hard worker, capable of getting things done as well as strong interpersonal and people management skills
