CHIEF Privacy Officer

Responsibilities Who We Are: SiriusXM and its brands (Pandora, SiriusXM Media, AdsWizz, Simplecast, and SiriusXM Connect) are leading a new era of audio entertainment and services by delivering the most compelling subscription and ad-supported audio entertainment experience for listeners -- in the car, at home, and anywhere on the go with connected devices. Our vision is to shape the future of audio, where everyone can be effortlessly connected to the voices, stories and music they love wherever they are. This is the place where a diverse group of emerging talent and legends alike come to share authentic and purposeful songs, stories, sounds and insights through some of the best programming and technology in the world. Our critically-acclaimed, industry-leading audio entertainment encompasses music, sports, comedy, news, talk, live events, and podcasting. No matter their individual role, each of our employees plays a vital part in bringing SiriusXM’s vision to life every day. SiriusXM is the leading audio entertainment company in North America, and the premier programmer and platform for subscription and digital advertising-supported audio products. SiriusXM’s platforms collectively reach approximately 150 million listeners, the largest digital audio audience across paid and free tiers in North America, and deliver music, sports, talk, news, comedy, entertainment and podcasts. Pandora, a subsidiary of SiriusXM, is the largest ad-supported audio entertainment streaming service in the U.S. SiriusXM's subsidiaries Simplecast and AdsWizz make it a leader in podcast hosting, production, distribution, analytics and monetization. The Company’s advertising sales organization, which operates as SiriusXM Media, leverages its scale, cross-platform sales organization and ad tech capabilities to deliver results for audio creators and advertisers. SiriusXM, through SiriusXM Canada Holdings, Inc., also offers satellite radio and audio entertainment in Canada. In addition to its audio entertainment businesses, SiriusXM offers connected vehicle services to automakers. How you’ll make an impact: We are seeking a highly motivated attorney to join the SiriusXM legal department to work on cutting edge privacy issues. This dual strategic and legal leadership role will be based in New York City and will define and execute SiriusXM’s global privacy vision across the collection of SiriusXM’s companies. As the senior subject matter expert in privacy, this role oversees how personal data is handled by business stakeholders and external parties across all lines of Sirius XM businesses and brands, including audio subscription services, connected vehicle services, marketing, data analytics, advertising sales and technologies, and engineering. The role also advises on the handling and processing of employee personal data for SiriusXM’s global workforce. The position reports to the SVP, Deputy General Counsel. What you'll do: Define, execute and scale the Company’s overarching global privacy vision, governance architecture and privacy risk assessment framework. Lead the Company's Privacy function within the Legal department in the design and execution of the Company’s privacy program, reviews of vendor and partner agreements, privacy impact and risk assessments, and consumer data rights management. Work collaboratively with other members of the legal department, privacy operations consultants and Company personnel to devise, manage and implement privacy program priorities and operational standards for compliance with regulatory and contractual requirements while maximizing business goals and objectives. Set legal and operational policies and standards for the collection, use, sharing, retention, and monetization of consumer personal data. Prepare reports for the Chief Legal Officer, C-suite leaders and Company’s Board of Directors, as applicable, on the status of the Company’s privacy posture, emerging privacy trends in regulation and enforcement and related business impacts, and compliance metrics. Lead the legal response to data security incidents and privacy breaches, serving as the privacy lead on the Incident Response Team and handling regulatory disclosures where required. Develop, publish and maintain corporate transparency through privacy notices, cookie policies, consumer-facing disclosures and consumer rights submission flows. Partner closely with engineering, product and marketing operations stakeholders and leads to embed Privacy by Design methodologies into product development lifecycles and data practices. Provide advice and guidance to data science and analytics teams on privacy-compliant training and deployment of machine and large language learning models, personalization engines and other listener telemetry. Guide marketing and lifecycle teams on compliant practices for personalization, direct marketing, paid marketing and first- and third-party data strategies. Oversee privacy regulatory and contractual compliance in ad sales, direct and programmatic advertising, identity resolution, data clean rooms, and third-party data and ad tech integrations. Lead team members in drafting and negotiations for data processing agreements, partner and vendor data sharing and licensing terms, and privacy audits for vendors, measurement partners, ad networks, data providers and other third-party data sources. Support business stakeholders in ongoing monitoring for compliance with regard to third party agreements. Define and oversee privacy frameworks for collection, use and protection of employee, contractor and candidate personal data worldwide, including in employee operations, cross-border transfers, use of AI in employment decisions, and workplace monitoring. Maintain current knowledge of applicable federal, state and foreign privacy laws and frameworks (e.g., CCPA, CA Delete Act, PIPEDA, GDPR, LGPD), maintain lawful cross-border transfer mechanisms, and monitor advancements in information privacy technologies to ensure organizational adaptation and compliance. Serve as the primary point of contact for data protection authorities, regulatory inquiries, and industry coalitions. Oversee privacy training, information sessions and other communications to increase employee understanding of company privacy policies, data handling practices and procedures and legal obligations. Work with business teams and senior management to ensure awareness of best practices on privacy issues. Develop and assist in the implementation of procedures for vetting and auditing vendors for compliance with the Company's privacy policies and contractual requirements. Represent the Privacy function in senior leadership discussions, vendor/customer meetings, and cross-functional forums where privacy requirements, tradeoffs, and risks must be resolved. Drive measurable improvements in privacy program maturity, incident readiness, vendor governance, compliant product launches, and privacy risk reduction.Manage privacy program resourcing, vendor support, and outside counsel engagement for privacy matters, as applicable. Leadership & Team Development: Lead, coach, and develop high-performing teams to foster career growth and professional development. Provide constructive feedback, conduct performance reviews, and guide team members in setting and achieving goals. Build and maintain an inclusive, collaborative team culture that encourages innovation and accountability. Provide hands‑off guidance to directors, senior managers, attorneys, paralegals, and privacy professionals to ensure the function operates efficiently and aligns with business goals. What you’ll need: Must be licensed and in good standing to practice law in NewYork. A Juris Doctorate from a nationally recognized law school is required. 15 years of legal experience, with 8-10 years of direct privacy law experience, including an in-depth knowledge of global privacy laws and experience with building, implementing, and maintaining a global privacy program. In‑house experience preferred. 8-10 years of people leadership, with a track record of building, coaching, and scaling high‑performing teams. Expert knowledge of US, Canadian, European and UK privacy laws and practices. Certified Information Privacy Professional‑US (CIPP‑US) certification required. CIPP‑EU, other certifications strongly preferred. Significant experience managing a team of attorneys, paralegals, privacy professionals, vendors, and outside counsel in support of a corporate privacy function. Excellent analytical and judgement skills. Excellent written and verbal communications skills with the ability to translate complex legal and privacy concepts into actionable requirements for all levels of the organization. Ability to act as a highly effective communicator regarding Company privacy requirements and data practices with vendors, partners, and regulators. Excellent time management skills with the ability to prioritize and multitask and work under shifting deadlines in a fast‑paced environment. Ability to work independently and in a team environment. Ability to maintain strong working relationships with demanding internal clients. Ability to remain confident, mature and calm under fire, and to make decisions and pivot quickly and fluidly, thinking practically and be solution‑oriented Experience advising on privacy and data security law and compliance efforts, including the organization and coordination of privacy assessments, corporate policies and processes. Demonstrated knowledge and experience drafting and negotiating complex agreements relating to in‑bound and out‑bound agreements. In‑depth knowledge of cutting edge IT, web, mobile and ad‑tech ecosystems and their privacy implications required. Knowledge of automotive technology systems or smart and connected devices strongly preferred. Direct experience advising internal stakeholders on privacy matters related to direct to consumer marketing and advertising as supply, demand, programmatic marketplace and ad tech intermediary. Must have legal right to work in the U.S. At SiriusXM, we carefully consider a wide range of factors when determining compensation, including your background and experience. These considerations can cause your compensation to vary. We expect the base salary for this position to be in the range of $254,000 to $310,000 and will depend on your skills, qualifications, and experience. Additionally, this role might be eligible for discretionary short‑term and long‑term incentives. Our goal at SiriusXM is to provide and maintain a work environment that fosters mutual respect, professionalism and cooperation. SiriusXM is an equal opportunity employer that does not discriminate on the basis of actual or perceived race, creed, color, religion, national origin, ancestry, alienage or citizenship status, age, disability or handicap, sex, gender identity, marital status, familial status, veteran status, sexual orientation or any other characteristic protected by applicable federal, state or local laws. The requirements and duties described above may be modified or waived by the Company in its sole discretion without notice. #LI-RE1 #J-18808-Ljbffr