Who we are
About Stripe
Stripe is a financial infrastructure platform for businesses. Millions of companies - from the world’s largest enterprises to the most ambitious startups - use Stripe to accept payments, grow their revenue, and accelerate new business opportunities. Our mission is to increase the GDP of the internet, and we have a staggering amount of work ahead. That means you have an unprecedented opportunity to put the global economy within everyone's reach while doing the most important work of your career.
About the team
The Privacy Legal team at Stripe tackles complex privacy issues that intersect with Stripe’s cutting-edge technology. We're seeking a technical and process-oriented lawyer with a passion for data, technology, privacy, and security. In this role, you will have the opportunity to work with a team of talented privacy lawyers to help solve intricate problems in a fast-paced environment.
What you’ll do
This role will be responsible for a wide variety of privacy matters. In addition to advising on product, regulatory, and operational privacy matters, you will also lead privacy legal workstreams for acquisitions and other strategic transactions, including post-close integration of acquired businesses, products, systems, and data practices.
Responsibilities
- Serve as lead privacy counsel on important cross-functional initiatives, independently identifying and assessing complex privacy and security risks, and providing pragmatic, risk-based advice that advances Stripe’s business objectives.
- Partner closely with Product, Engineering, Security, Data Science, GTM, and other teams to design and implement privacy mitigations and embed privacy-by-design principles into Stripe’s products and operational processes.
- Develop, enhance, and implement Stripe’s privacy infrastructure, policies, and procedures, setting short- to medium-term direction for assigned privacy programs and improving how privacy work scales across teams.
- Lead privacy legal workstreams for acquisitions and other strategic transactions, from diligence through post-close integration. Identify and prioritize privacy risks; advise on deal terms, integration decisions, and remediation; and coordinate with Corporate Development, Legal, Product, Engineering, Security, Compliance, and other teams.
- Own the privacy integration of acquired businesses, products, systems, and data practices, including the integration or remediation of data inventories, notices, consent practices, data-use purposes, retention requirements, data-subject rights processes, vendor arrangements, and privacy governance.
- Lead or provide senior legal guidance for privacy compliance functions, including Data Protection Impact Assessments, Data Subject Access Requests, and Records of Processing Activities.
- Lead the legal response to significant privacy and security incidents, coordinating cross-functional risk assessment, remediation, regulatory analysis, and breach-notification decisions.
- Advise on complex commercial transactions and negotiate Data Processing Agreements and other privacy and security provisions, balancing legal risk with Stripe’s business objectives.
- Help shape and implement Stripe’s privacy and data-governance approach for AI and machine learning.
Who you are
We're looking for someone who meets the minimum requirements to be considered for the role. If you meet these requirements, you are encouraged to apply. The preferred qualifications are a bonus, not a requirement.
Minimum requirements
- J.D. degree (or foreign equivalent) with membership in at least one US state bar.
- Minimum of 6 years of experience as a privacy lawyer, with extensive knowledge of global privacy laws and regulations, including GDPR, CCPA, and GLBA.
- Experience leading privacy workstreams for acquisitions or other strategic transactions, including privacy diligence, risk assessment, and post-close integration or remediation.
- A strong understanding of technology, data flows, and system architecture, with the ability to work directly with engineers, and to translate complex technical facts into practical legal advice and integration requirements.
- Experience managing data-security incidents, and familiarity with data-breach notification requirements
- Proficiency in negotiating and drafting complex contracts involving privacy and security terms.
- Strong organizational and project leadership skills, including the ability to lead multiple complex, cross-functional workstreams, establish priorities, remove roadblocks, and drive matters to completion.
- Excellent written and oral communication skills.
Preferred qualifications
- Demonstrated ability to make sound, independent, risk-based judgments in ambiguous or high-stakes situations while balancing privacy requirements with Stripe’s business objectives.
- Ability to identify the right cross-functional stakeholders, build consensus, and drive implementation across teams with different priorities.
- A pragmatic, hands-on approach, and the adaptability to move between strategic advice, detailed integration work, incident response, and program development.
- A skilled advisor and negotiator who develops practical solutions and is regularly sought out for guidance on complex privacy matters.
- Ability to communicate complex legal, technical, and business tradeoffs clearly, including preparing materials that enable senior leaders to make informed decisions.