Head of Privacy

The mission of The New York Times is to seek the truth and help people understand the world. That means independent journalism is at the heart of all we do as a company. It’s why we have a world-renowned newsroom that sends journalists to report on the ground from nearly 160 countries. It’s why we focus deeply on how our readers will experience our journalism, from print to audio to a world-class digital and app destination. And it’s why our business strategy centers on making journalism so good that it’s worth paying for. 

About the Role:  

As part of the Commercial Business and Legal Affairs team and reporting to the SVP, Associate General Counsel & Strategic Partnerships, the Vice President, Head of Privacy (Privacy, Cyber Security, Consumer Compliance) is responsible for all legal aspects of data privacy, information security, and consumer marketing and subscriptions-related compliance across the company and for managing the Company's privacy compliance function. You will work closely with senior executives and operational leads as well as the working team, including the areas of marketing operations, subscription growth, product, engineering, technology, data governance, information security, commercial contracts, and marketing and advertising technology. In this position, you will manage a team. 

This is a hybrid role based in our New York City headquarters. You can typically expect to come into the office 3 days per week.

Responsibilities:

• Advise all internal clients on the risks and operational controls related to the development, collection, use, transfer, and governance of personal data of consumers, employees, and other stakeholders. This will include privacy, online safety, and cybersecurity (from both U.S. and international perspectives). 

• Advise key business stakeholders on the company’s data governance, cybersecurity, marketing and subscriptions compliance efforts in a manner consistent with the Company’s goals and culture.

• Drive measurable improvements in privacy program maturity, incident readiness, vendor governance, compliant product launches, and privacy risk reduction. Manage privacy program resourcing, vendor support, and outside counsel engagement for privacy matters, as applicable.

• Draft and/or update privacy program-related policies and standards, public-facing and internal; as well as terms of use, terms of sale, and other consumer-facing acceptable use and moderation policies.

• Supervise and oversee the preparation and updating of Data Protection Impact Assessments and other risk assessment and audit activities as needed. Conduct comprehensive business risk assessments; develop/implement risk mitigation and corrective action plans where needed.

• Advise on privacy regulatory and contractual compliance in marketing, ad sales, direct and programmatic advertising, identity resolution, data clean rooms, and third-party data and ad tech integrations to help ensure compliance with privacy and consumer protection laws and industry standards.

• Review, draft and negotiate data protection agreements and security exhibits and work closely with the appropriate teams to advise on third party risk reviews. 

• Advise on all relevant consumer protection, subscriptions and marketing laws, regulations and best practices.

• Provide product counseling to include privacy, cybersecurity and consumer compliance legal advice as well as other areas of related legal need – in connection with product and platform developments and releases. 

• Regularly track and counsel clients on legal US and international developments in areas of data privacy, cybersecurity and consumer marketing and subscription compliance.

• Serve as legal lead for all security incident response, working closely with the company’s Chief Information Security Officer and other key stakeholders; draft and update information security policies and procedures.

• Provide advice and guidance to data science and analytics teams on privacy-compliant deployment of machine learning models and personalization.

• Oversee and develop company-wide training strategy and execution for areas of coverage.

Basic Qualifications:

• Juris Doctor is required and must be a member of the New York Bar.

• 15+ years of experience in US and international data privacy and protection; negotiating data privacy-related agreements, building, implementing, and maintaining a global privacy program; supporting cybersecurity. 

• 5+ years of experience managing people with proven experience effectively managing cross-functional relationships and competing priorities.

• 5+ years of previous in-house experience.

• Experience advising on online safety laws such as age-appropriate design codes and app store age signals laws, and sensitive data privacy regulations such as laws governing health data in ad tech and biometric privacy.

• Experience advising or managing legal professionals who advise on a wide variety of consumer-related issues both domestic and international, including payflow, subscription offerings, marketing, auto-renewal and click-to-cancel laws, anti-spam, Telephone Consumer Protection Act, unfair and deceptive practice laws, customer care complaints and escalations, and payment card rules.

Preferred Qualifications:

• 5+ years in-house experience at a tech platform, media company, and/or subscription-first company.

REQ-020566

Additional Compensation and Benefits:

For roles in the U.S., dependent on your role, you may be eligible for variable pay, such as an annual bonus and restricted stock. Benefits may include medical, dental and vision benefits, Flexible Spending Accounts (F.S.A.s), a company-matching 401(k) plan, employee stock purchase plan, paid vacation, paid sick days, paid parental leave, tuition reimbursement and professional development programs.

For roles outside of the U.S., information on benefits will be provided during the interview process.

The annual base pay range for this role is between:$275,000—$315,000 USD

Candidate Use of GenAI Tools:

We’re excited to learn more about you and your experience. To keep our hiring process as fair and authentic as possible, we ask that you submit your own work and not use GenAI tools to generate substantive content during the application and interview process.

If you’re an engineering candidate, we’ll let you know what specific GenAI tools you are permitted to use for your technical assessment.

The New York Times Company is committed to being the world’s best source of independent, reliable and quality journalism. To do so, we embrace a diverse workforce that has a broad range of backgrounds and experiences across our ranks, at all levels of the organization. We encourage people from all backgrounds to apply.

We are an Equal Opportunity Employer and do not discriminate on the basis of an individual's sex, age, race, color, creed, national origin, alienage, religion, marital status, pregnancy, sexual orientation or affectional preference, gender identity and expression, disability, genetic trait or predisposition, carrier status, citizenship, veteran or military status and other personal characteristics protected by law. All applications will receive consideration for employment without regard to legally protected characteristics. The U.S. Equal Employment Opportunity Commission (EEOC)’s Know Your Rights Poster is available here. 

The New York Times Company will provide reasonable accommodations as required by applicable federal, state, and/or local laws. Individuals seeking an accommodation for the application or interview process should email reasonable.accommodations@nytimes.com. Emails sent for unrelated issues, such as following up on an application, will not receive a response.

For information about The New York Times' privacy practices for job applicants, click here.

Please beware of fraudulent job postings. Scammers may post fraudulent job opportunities, and they may even make fraudulent employment offers. This is done by bad actors to collect personal information and money from victims. All legitimate job opportunities from The New York Times will be accessible through The New York Times careers site. The New York Times will not ask job applicants for financial information or for payment, and will not refer you to a third party to do so. You should never send money to anyone who suggests they can provide employment with The New York Times.

If you see a fake or fraudulent job posting, or if you suspect you have received a fraudulent offer, you can report it to The New York Times at NYTapplicants@nytimes.com. You can also file a report with the Federal Trade Commission or your state attorney general.