Provide legal review, guidance and support on privacy, data protection and security matters across The Kroger Co. and its affiliated companies. Partner cross-functionally with the business, including IT, sourcing, product development, engineering, information security, and our other Company attorneys to inform, influence and advise on data uses and privacy strategies while managing legal risk and ensuring regulatory compliance involving use of personal information. Must have a strong foundation in drafting and negotiating complex contracts and in-depth knowledge and expertise on data privacy and security laws. Provide legal review, guidance and support on privacy, data protection and security matters across The Kroger Co. and its affiliated companies. Partner cross-functionally with the business, including IT, sourcing, product development, engineering, information security, and our other Company attorneys to inform, influence and advise on data uses and privacy strategies while managing legal risk and ensuring regulatory compliance involving use of personal information. Must have a strong foundation in drafting and negotiating complex contracts and in-depth knowledge and expertise on data privacy and security laws. Demonstrate the company's core values of respect, honesty, integrity, diversity, inclusion, and safety.MINIMUM
7+ years combined experience in law firms, governmental agencies, and/or in-house legal departments
4+ years of experience providing pragmatic and actionable advice to clients on various legal risks and obligations under privacy and data security laws in the U.S.
Juris Doctor from accredited U.S. law school
Admission to at least one state bar
Exceptional contract drafting and written communication skills
Extensive experience drafting and negotiating data privacy and security terms and agreements, with retail media and advertising experience strongly preferred
Experience drafting and negotiating complex technology, license, data sharing, ad tech, and other agreements with privacy-implications
Expert knowledge and understanding of data privacy and security laws, regulations and industry best practices, with expertise on how those laws apply in the digital media and advertising space strongly preferred
Ability to translate legal advice into actionable guidance for product, engineering, security, and business teams
Ability to work with IT professionals and knowledge of basic IT terms and concepts
Strong analytical, strategic thinking, and communication skills with demonstrated legal and business judgment
Strong ethical compass and problem-solving skills
Demonstrate the company's core values of respect, honesty, integrity, diversity, inclusion and safety.
Ability to build and manage a network of key stakeholder relationships
DESIRED
Bachelor's Degree in IT, Data Analytics or Cybersecurity
Previous work experience in ad tech/marketing
Draft, review and negotiate data protection addendums and other data-related agreements for wide-ranging business initiatives, including with vendors, clients, and business partners
Negotiate a wide range of complex commercial transactions involving consumer data, including technology, marketing, and license agreements
Provide pragmatic privacy and data security subject matter expertise, guidance and advise on compliance with all applicable laws, rules and regulations
Partner with our Privacy Office to support, enhance, scale and run Kroger's existing privacy program, including privacy operations and documentation; employee training; policy enforcement, and monitoring and auditing
Collaborate with compliance, information security and other stakeholders to perform privacy assessments
Proactively monitor and remain up to date on relevant consumer protection, privacy and data security laws and regulations, enforcement actions, technological developments, threat vectors, industry and regulatory trends and topics, and evolving industry standards and best practices
Work with privacy legal team members to maintain, update, and draft contract templates and playbooks
Provide legal support for security incident response activities
Must be able to perform the essential job functions of this position with or without reasonable accommodation
