The opportunity
Coursera and Udemy are now one company, creating one of the world's most comprehensive skills development platforms for the AI era. This strengthens our ability to accelerate AI-powered innovation and shape how the world discovers and builds skills at a pivotal moment of change.
What you'll do
Global subject matter expert: Serve as the primary legal advisor on US privacy laws, including federal and state frameworks (such as CCPA/CPRA), while providing guidance on applicable global privacy and privacy-adjacent laws, including the EU and UK GDPR and key APAC and Latin American frameworks. Advise the business on legal and regulatory developments and their practical impact.
Privacy Program: Help to continuously develop, implement, and scale Coursera and Udemy’s global privacy program, including by developing and maintaining standardized privacy notices, internal policies, tools, processes, playbooks, and training.
Delivering Legal Guidance: Support and advise key stakeholders on a broad range of complex privacy, AI, and cyber issues and provide pragmatic and risk-based solutions in accordance with global privacy laws.
Incident reporting: Investigate and manage security incidents that impact personal information, together with Engineering, InfoSec and other stakeholders.
Regulatory responses: Respond to requests and inquiries from individuals and privacy regulators.
Strategic leadership: Act as a trusted advisor to senior leadership on privacy risk and strategy, and mentor and support other members of the Privacy and broader Legal and Compliance teams.
What they're looking for
- Juris Doctor (JD) from an accredited law school and active membership in at: least one US state bar, with 8+ years of legal experience, including at least five years experience advising on privacy and matters in a law firm, an in-house legal department, or both.
- Demonstrated experience advising on US privacy and privacy adjacent laws,: including CCPA/CPRA and other US state privacy laws, with working knowledge of GDPR and other global privacy frameworks.
- Demonstrated experience with implementing/maintaining foundational aspects of: a global privacy compliance program, including experience working with privacy compliance tools and developing processes to enforce internal privacy protocols.
- Demonstrated history of working autonomously and at pace, exercising sound: judgment to resolve complex and ambiguous privacy issues and deliver practical, business-focused outcomes, including by explaining complex concepts clearly to stakeholders at all levels.