Head of Privacy / Lead Privacy Lawyer

Mapbox is the leading real-time location platform for a new generation of location-aware businesses. Mapbox is the only platform that equips organizations with the full set of tools to power the navigation of people, packages, and vehicles everywhere. More than 4 million registered developers have chosen Mapbox because of the platform’s flexibility, security and privacy compliance. Organizations use Mapbox applications, data, SDKs and APIs to create customized and immersive experiences that delight their customers.

We operate a mapping and location platform that enables enterprises and software developers to quickly embed location-based context into their applications (e.g., where am I, where is this place, and how do I get there). Our main products are APIs and SDKs (not a SaaS service), which means that our customers control what information they send to us in the form of the structured API requests (e.g., please send me map content at X location). Our maps are designed for the ever-evolving world, accessing, aggregating, and adapting de-identified data from millions of sensors and phones in real-time.

You will be the Head of Privacy and Lead Privacy Lawyer for Mapbox, reporting directly to the General Counsel. This is a key role within the legal team and the company. We are looking for a dynamic, practical and technology-savvy attorney with a passion for privacy and technology to advise internal clients and work with our key customers on privacy issues related to product and feature development, use of data and other new projects. You must be very technology literate, practical and comfortable balancing legal risks and our business strategy.

This is a senior individual contributor role focused on privacy. We are not planning to build out a team under this position. You must be very comfortable with and interested in doing the whole range of privacy work – from strategic cross-functional product consulting to completing vendor questionnaires and negotiating DPAs and privacy provisions in commercial agreements.

The focus of this position is to:

• Partner with our head of policy and engineering, product management, and infosec teams as the lead legal point of contact with regard to privacy and security through the product development lifecycle.
• Partner with our head of policy and engineers and product teams to review new products and features to ensure compliance with applicable data protection laws.
• Advise teams on legal issues related to management and use of data collected and processed by Mapbox products/services.
• Review and edit DPAs and data privacy and security provisions in customer agreements and vendor questionnaires/RFPs. Strong drafting skills required.
• Work with engineering and product teams to ensure that privacy-by-design is embedded into Mapbox products/services, including working with engineering and product teams on various technical and operational means to minimize and pseudonymize personal data.
• Work with colleagues across the organization to continually improve compliance programs for privacy and data security, including GDPR and CCPA
• Conduct general and role-specific privacy training.
• Be the resident legal expert on sub processors' activities, including data processing and data transfers, to advise relevant teams on privacy impact
• Stay informed about, and advise on, regulatory and industry developments, including monitoring trends in privacy and security laws and regulations.
• Develop customer collateral and resources, such as notes to customers, notices, disclosures, and privacy data sheets, to help customers and users assess the privacy impact of using Mapbox services and data transfer risks.

A strong technology background is important. With privacy regulations, the devil is often in the details and you must become very conversant in our technology – the ins and outs of our APIs, SDKs and data products. We don’t believe that lawyers can give good legal advice in a vacuum – in particular when it relates to privacy and product issues -- and so it’s critical that you are interested in and become immersed in our business and products. An undergraduate degree in engineering or computer science is a plus, as is experience working with SDKs and APIs.

We are a flat organization, but we pitch in and help each other. You must be willing to roll up your sleeves and dive into a variety of issues, enjoy the give and take of collaboration and take feedback.

While work/life balance is important to everyone, we work harder than other bigger in-house departments that have more resources and support. If you’re looking for a 9 to 5 job, this isn’t likely for you.

• 7+ years of practicing attorney experience, with 2+ years at a top-tier law firm in any area and 5+ years in-house at a technology company in privacy.
• At least one of the following is required:
  • Computer engineering, computer science or other similar technical degree.
  • At least 2, but not more than 4, years experience in software patent litigation or patent prosecution at a top tier firm.
  • Extensive experience working with APIs and SDKs.
• Excellent communication skills. Your writing and verbal communications need to be clear and concise. You must be able to draft practically and deftly, not just copy and paste provisions.
• A practical and customer-centric orientation and negotiation style. You understand (or will quickly learn) the business deal so you know what matters and what doesn't and will focus on practical resolutions to speed deals through the pipeline.
• A sense of humor. We take our work seriously, but we try not to take ourselves too seriously.
• The legal team is working entirely remotely. While we think candidates who live near technology hubs often have the best backgrounds, we will consider remote candidates who live anywhere in the US. We prefer candidates in the Pacific time zone.
• JD degree from top-tier law school and active membership in at least one US state bar.
• If your resume doesn’t clearly demonstrate the first two points above, you should include a cover note as to why you are interested in this role and why you think you would be a good fit despite not meeting those criteria. Resumes without a cover note in those circumstances will likely not be considered.

• We value high-performing creative individuals who dig into problems and opportunities.
• We believe in individuals being their whole selves at work. We commit to this through supportive health care, parental leave, flexibility for the things that come up in life, and innovating on how we think about supporting our people.
• We emphasize an environment of teaching and learning to equip employees with the tools needed to be successful in their function and the company.
• We strongly believe in the value of growing a diverse team and encourage people of all backgrounds, genders, ethnicities, abilities, and sexual orientations to apply.

Our total annual cash compensation for this role ranges from $220,000 - $300,000. Job level and actual compensation will be decided based on factors including, but not limited to, individual qualifications objectively assessed during the interview process (including skills and prior relevant experience, potential impact, and scope of role), market demands, and specific work location. Please discuss your specific work location with your recruiter for more information.

#LI-Remote