Counsel – Privacy, Cybersecurity, AI & Product Technology
Remote, Based in Maryland, Virginia, Delaware, or Washington DC area.
Come build something that matters.
It takes great people to achieve greatness. People with a sense of purpose and integrity. People with a relentless pursuit of excellence. People who care about making things better For Those Who Make The World™. Sound like you? Join our top-notch team of approximately 43,500 diverse and high-performing professionals globally who are making their mark on some of the world’s most beloved brands, including DEWALT®, BLACK+DECKER®, CRAFTSMAN®, STANLEY®, CUB CADET®, and HUSTLER®.
The Job:
The Counsel will provide practical, business-oriented legal advice for Stanley Black & Decker’s privacy, cybersecurity, artificial intelligence, technology, consumer privacy, and product compliance initiatives. Reporting to the VP, Global Privacy and Technology Governance Counsel, this role will serve as an embedded legal partner to teams across the Americas while contributing to global governance programs. The Counsel will independently manage appropriately scoped matters, collaborate with senior counsel on complex or enterprise-significant issues, and help identify and address legal risk early in the lifecycle of technology procurement, product development, commercialization, and customer engagement, with particular emphasis on technology-enabled and connected products.
Privacy, Cybersecurity & AI Advisory
Provide day-to-day legal guidance on privacy, data protection, cybersecurity, data governance, digital compliance, and responsible AI matters, independently managing routine and moderately complex issues and partnering with senior counsel on novel or high-risk matters.
Support SBD’s Consumer Privacy program, including advising on consumer-facing privacy requirements, notices, consent and preference management, data subject and consumer rights processes, retention, marketing practices, and other operational privacy matters across the Americas.
Prepare, review, and maintain Privacy Impact Assessments (PIAs) and Data Protection Impact Assessments (DPIAs) for new or changing technologies, products, services, processing activities, and business initiatives; recommend mitigation measures and track required follow-up.
Use OneTrust to manage privacy intake, assessment workflows, records, approvals, reporting, and evidence of compliance.
Conduct privacy, security, and AI risk assessments and provide practical recommendations to business and functional stakeholders.
Translate legal and regulatory requirements into practical controls, playbooks, contract positions, product requirements, and business guidance.
Monitor relevant legal and regulatory developments across the Americas and support impact assessments, readiness planning, policies, standards, and training.
Support incident preparedness and response, including legal research, fact development, documentation, notification analysis, and coordination with Cybersecurity, IT, Privacy, Communications, and outside counsel.
Manage AI governance intake, risk review, approvals, documentation, acceptable-use guardrails, and ongoing monitoring for appropriately scoped matters.
Technology Procurement & Contracting
Partner with Global Supply Management and its counsel, IT, Cybersecurity, Privacy, and business stakeholders throughout vendor intake, diligence, sourcing, negotiation, onboarding, and lifecycle management.
Independently review, draft, and negotiate routine and moderately complex technology-related agreements and exhibits, including SaaS, cloud, software, professional services, data processing and transfer terms, cybersecurity requirements, AI terms, statements of work, technology licensing terms, and confidentiality agreements.
Support and, where appropriate, lead customer-facing commercial negotiations involving technology products, digital services, connected products, data use, cybersecurity, privacy, AI, audit rights, regulatory…