Head of Privacy / Lead Privacy Lawyer

Mapbox is the leading real-time location platform for a new generation of location-aware businesses. Mapbox is the only platform that equips organizations with the full set of tools to power the navigation of people, packages, and vehicles everywhere. More than 4 million registered developers have chosen Mapbox because of the platform’s flexibility, security and privacy compliance. Organizations use Mapbox applications, data, SDKs and APIs to create customized and immersive experiences that delight their customers. We operate a mapping and location platform that enables enterprises and software developers to quickly embed location-based context into their applications (e.g., where am I, where is this place, and how do I get there). Our main products are APIs and SDKs (not a SaaS service), which means that our customers control what information they send to us in the form of the structured API requests (e.g., please send me map content at X location). Our maps are designed for the ever-evolving world, accessing, aggregating, and adapting de-identified data from millions of sensors and phones in real-time. WHAT YOU'LL DO You will be the Head of Privacy and Lead Privacy Lawyer for Mapbox, reporting directly to the General Counsel. This is a key role within the legal team and the company. We are looking for a dynamic, practical and technology-savvy attorney with a passion for privacy and technology to advise internal clients and work with our key customers on privacy issues related to product and feature development, use of data and other new projects. You must be very technology literate, practical and comfortable balancing legal risks and our business strategy. This is a senior individual contributor role focused on privacy. We are not planning to build out a team under this position. You must be very comfortable with and interested in doing the whole range of privacy work – from strategic cross-functional product consulting to completing vendor questionnaires and negotiating DPAs and privacy provisions in commercial agreements. The focus of this position is to: - Partner with our head of policy and engineering, product management, and infosec teams as the lead legal point of contact with regard to privacy and security through the product development lifecycle. - Partner with our head of policy and engineers and product teams to review new products and features to ensure compliance with applicable data protection laws. - Advise teams on legal issues related to management and use of data collected and processed by Mapbox products/services. - Review and edit DPAs and data privacy and security provisions in customer agreements and vendor questionnaires/RFPs. Strong drafting skills required. - Work with engineering and product teams to ensure that privacy-by-design is embedded into Mapbox products/services, including working with engineering and product teams on various technical and operational means to minimize and pseudonymize personal data. - Work with colleagues across the organization to continually improve compliance programs for privacy and data security, including GDPR and CCPA - Conduct general and role-specific privacy training. - Be the resident legal expert on sub processors' activities, including data processing and data transfers, to advise relevant teams on privacy impact - Stay informed about, and advise on, regulatory and industry developments, including monitoring trends in privacy and security laws and regulations. - Develop customer collateral and resources, such as notes to customers, notices, disclosures, and privacy data sheets, to help customers and users assess the privacy impact of using Mapbox services and data transfer risks. A strong technology background is important. With privacy regulations, the devil is often in the details and you must become very conversant in our technology – the ins and outs of our APIs, SDKs and data products. We don’t believe that lawyers can give good legal advice in a vacuum