Rackspace
Corporate Counsel - Privacy, Cybersecurity & AI
Job Summary
The role involves acting as legal counsel for privacy, cybersecurity, incident management, and AI-related functions globally. The candidate will support the Privacy Office, ensure compliance with data protection laws, and advise internal teams on legal policies and risk mitigation. Responsibilities include managing privacy programs, maintaining documentation, conducting audits, and coordinating incident response. The role requires strong legal expertise in data privacy and cybersecurity, excellent communication skills, and experience with privacy management tools and regulations.
Required Skills
Benefits
Job Description
Rackspace is looking for a Corporate Counsel to act as attorney for the management of the global (US, LATAM, EMEA & APJ) privacy, cybersecurity, incident management & artificial intelligence (AI) legal functions. The successful candidate will be a key member of the Rackspace Privacy Office, the global legal department, and will work with a broader team of supporting legal staff. The successful candidate will report to the VP, Deputy General Counsel & Chief Privacy Officer - Global, who is based in the US.
- Acts as attorney for the Privacy Office, cybersecurity, incident management and AI legal functions globally. Supports the Chief Privacy Officer in oversight of the Rackspace privacy function.
- Maintains Privacy Office records and action plans, measures Privacy Office KPIs, and provides regular privacy reports to the Chief Privacy Officer and operational groups.
- Tracks existing and proposed privacy, cybersecurity and AI legislation related to operations of the company, updates the privacy program directly, and advises affected stakeholders accordingly.
- Maintains all privacy-related policies, procedures, notices (and records of consent), external public collateral, and Privacy Office playbooks and provides advice and support to business on compliance.
- Consults with the Chief Information Security Officer, Chief Information Officer, Law Enforcement, Incident Management & AI teams on interdependent policies, procedures, and external collateral.
- Maintains entity, data protection officer, local representative and cybersecurity registrations, and documentation required by law.
- Maintains data mapping, records of processing activity, legitimate interest and impact and transfer assessments, and transfer agreements.
- Advises the Marketing organization on privacy matters including data collection and processing procedures, cookies and tracking technologies, and privacy-related advertising.
- Advises the Supply Chain and Security organizations on third party management and due diligence, and maintains processor and subprocessor records and notices required by law.
- Supports Supply Chain and Product counsel in the drafting of appropriate template privacy and cybersecurity transactional terms, playbook direction for negotiation, and process for approvals.
- Advises the Chief Information Security Officer and Chief Information Officer on privacy related security and records management privacy requirements and controls; and advises the Chief Information Security Officer on cybersecurity obligations and compliance.
- Advises the President AI, Chief Information Security Officer and related teams on AI governance and compliance.
- Assists the Chief Privacy Officer and Incident Management teams in incident response, conducts privileged incident investigations, conducts assessment and notification of potential data & cybersecurity breaches, conducts legal analysis of incident trends, maintains records of breaches and near misses, assists in recovery and remediation.
- Coordinates and ensures timely fulfillment of data subject requests including data discovery, and maintenance of request logs and records.
- Conducts internal privacy audits and checks, coordinates external privacy audits, completes third-party privacy certifications, and supports security audits and certifications.
- Handles pre-litigation privacy or cybersecurity complaints, claims, and regulatory investigations; and acts as liaison with supervisory authorities.
- Manages privacy tooling including OneTrust, TrustArc, and data discovery tooling and works with internal systems staff to integrate tooling as required.
- Provides onboarding and annual training for employees, and proactive privacy training and enablement to client business functions to manage legal workloads, mitigate legal risk and enable business activities.
- Provides supervision and training to more junior supporting team members, and works collaboratively across legal and business functions.
- Collates available privacy training and updating materials for other legal teams, and encourages the development of privacy competence and expertise across the global legal department. Is an engaged member of the global legal department, supporting cross-departmental initiatives and activities.
- Advises global senior executives and other internal clients, providing applied legal advice and working with clients to navigate available options.
- There are opportunities to become involved in other legal assignments and projects as they may arise.
- Ability to balance accuracy and thoroughness, with a pragmatic commercial approach showing excellent commercial and strategic judgment.
- Excellent communication skills, and a patient and calm approach with clients and legal team members.
- Ability to build strong relationships with internal clients and legal stakeholders, act as a trusted partner and business enabler, with a willingness to challenge when required.
- Ability to problem solve with business clients to reach solutions and results, in novel situations.
- Excellent time management and organizational skills, with ability to context shift and handle a varied workload.
- JD degree or local equivalent, with strong academic background.
- Active bar admission as appropriate to the role.
- CIPP/E, CIPP/US, CIPM, CIPT & AIGP preferred (with certified cybersecurity expertise as bonus).
- No less than 3 years of relevant legal experience as a qualified privacy and cybersecurity counsel.
- Experience with large-scale data processing and in the technology sector (previous in-house experience in a global technology company is a bonus).
- Advanced knowledge of applicable laws – including data privacy law, cybersecurity law, AI law, and contract law (multi-jurisdictional knowledge of legal issues in these areas is a bonus).
- Advanced knowledge of privacy management tooling (including OneTrust and TrustArc, data discovery tooling, and Archer) and privacy engineering, preferred.
The following information is required by pay transparency legislation in the following states: CA, CO, HI, NY, and WA. This information applies only to individuals working in these states.
- The anticipated starting pay range for Colorado is:$105,100 - $154,110
- The anticipated starting pay range for the states of Hawaii and New York (not including NYC) is:
$111,800 - $164,010
- The anticipated starting pay range for California, New York City and Washington is:$122,500 - $179,630
Unless already included in the posted pay range and based on eligibility, the role may include variable compensation in the form of bonus, commissions, or other discretionary payments. These discretionary payments are based on company and/or individual performance and may change at any time. Actual compensation is influenced by a wide array of factors including but not limited to skill set, level of experience, licenses and certifications, and specific work location. Information on benefits offered is here.
#LI-AW2
Rackspace
As a cloud computing services pioneer, we deliver proven multicloud solutions across your apps, data, and security. Maximize the benefits of modern cloud.
See more jobsSafe Remote Job Search Tips
Verify Employer Thoroughly
Research the company's identity thoroughly before applying. Check for a professional website with contacts, active social media, and LinkedIn profiles. Verify details across platforms and look for reviews on Glassdoor or Trustpilot to confirm legitimacy.
Never Pay to Get a Job
Legitimate employers never require payment for applications, training, background checks, or equipment. Always reject upfront payment requests or demands for bank details, even if they claim it's for purchasing necessary work gear on your behalf.
Safeguard Your Personal Information
Protect sensitive data like SSN, bank details, or ID copies. Share this only after accepting a formal, written job offer. Ensure it's submitted via a secure company system or portal, never through insecure channels like standard email attachments.
Scrutinize Communication & Interviews
Watch for communication red flags: poor grammar, generic emails (@gmail), vague details, or undue pressure. Be highly suspicious of interviews held only via text or chat apps; legitimate companies typically use video or phone calls.
Beware of Unrealistic Offers
If an offer's salary or benefits seem unrealistically high for the work involved, be cautious. Research standard pay for similar roles. Offers that appear 'too good to be true' are often scams designed to lure you into providing information or payment.
Insist on a Formal Contract
Always secure and review a formal, written job offer or employment contract before starting work or sharing final personal details. Ensure it clearly defines your role, compensation, key terms, and conditions to avoid misunderstandings or scams.