Provide practical, solution-oriented legal advice on issues arising from the development and marketing of Scribd products and features, including privacy, data security, consumer protection (including marketing disclosures), online safety, and content moderation.
Develop compliance programs and oversee ongoing compliance with domestic and global privacy regulations (e.g., CCPA/CPRA, GDPR, COPPA, and emerging frameworks) and online safety laws (e.g., UK OSA and DSA).
Advise on security incident preparedness and response, including incident response plans, breach notification requirements, and post-incident communications.
Review, draft, and negotiate a variety of contracts, including vendor agreements, data processing agreements, and partnership deals, with a focus on privacy and security provisions.
Identify opportunities to streamline the contract process, including by developing contract templates, effectively issue spotting, and developing contract processes and guidelines in collaboration with internal stakeholders.
Provide strategic guidance on content licensing, distribution, copyright, and other content-related legal matters, including generative AI technologies.
Partner with stakeholders across the organization, including in engineering, product management, marketing, and security to operationalize compliance requirements and privacy-by-design practices throughout Scribd’s product development lifecycle.
Requirements
J.D. from an accredited law school; active bar membership in at least one U.S. jurisdiction.
Minimum of 5 years of legal practice, with significant experience in privacy, data protection, and product counseling as an in-house or law firm attorney.
Demonstrated expertise with global privacy laws and regulations, including GDPR, CCPA/CPRA, COPPA, and knowledge of laws and regulations governing online intermediaries and social media platforms.
Experience managing security incident response and advising on breach notification requirements.
Strong background in contract drafting and negotiation, particularly with data protection and security terms.
Excellent judgment and ability to balance legal risk with business goals in a fast-paced environment.
Clear, concise communication skills and ability to collaborate with cross-functional partners at all levels.
Ability to provide advice and assess legal risk in the context of business strategy.