Reporting to our VP of Business Integrity, we are seeking a seasoned privacy attorney to serve as Director of Privacy. This position is ideal for an ambitious and collaborative subject matter expert with experience managing a team of attorneys. This is an exciting opportunity to join a dynamic, fully distributed global enterprise and foster the continued development of its global privacy program. This role requires a leader who thrives in working cross-functionally to drive privacy compliance and awareness across the company, including in product development, procurement, HR, finance, legal, sales, and other areas. We will consider applicants in the United States or Europe.

What You Will Be Doing:

• Lead a team of three experienced privacy professionals who are responsible for the operation of Elastic’s privacy processes and controls.
• Lead the Data Privacy Program, providing strategic direction and insights to support a business-forward, innovative and risk-based approach.
• Advise on legal and business strategies for mitigating privacy related risks, ensuring compliance with regulations and laws and best practices regarding data governance.
• Advise senior leadership on privacy and data protection-related matters, and respond to inquires from a wide range of stakeholders within the company and provide practical advice consistent with Elastic’s risk tolerance.
• Maintain subject matter expertise in applicable foreign and domestic regulations pertaining to privacy and data security, and stay on top of changes and new developments. This includes analysis of the impact of new or pending laws and regulations on Elastic’s business and operations.
• Support the product, customer-facing and supplier-facing legal teams with legal advice related to security and privacy contract terms.
• Oversee and assist with routine work, such as privacy notices and policies, privacy impact assessments, data protection impact assessments, transfer impact assessments, records of processing activities, data subject access requests, and data processing/usage/transfer agreements.
• Assist with privacy training and awareness efforts to strengthen Elastic's culture of privacy.

What You Bring:

• An active license to practice law.
• Minimum 8 years of legal experience specific to privacy, with preference for those who also have at least 3 years of in-house experience in a managerial role.
• Experience overseeing the operational aspects of a privacy program, such as developing and/or implementing systems and processes for: Mitigating customer and vendor privacy risks, Data inventory/categorization/mapping, Compliance with data subject access requests and deletion requests, Providing required notices and collecting required consents, Auditing and monitoring data lifecycle controls, and Conducting privacy risk and impact assessments.
• Experience addressing complex matters encompassing U.S. and European data privacy and cybersecurity regulations.
• Experience reviewing, drafting and negotiating privacy and data protection contract terms and agreements, data processing, usage, and/or transfer agreements.
• Instinct to be proactive, ability to exercise independent judgment, and effective approaches partnering with cross-functional teams.
• Strong sense of ownership and must be comfortable in a dynamic and evolving environment.
• Excellent judgment, character, and professional integrity.