Legal Counsel, Data Protection - Commercial Legal

Splunk is here to build a safer and more resilient digital world. The world's leading enterprises use our unified security and observability platform to keep their digital systems secure and reliable. While customers love our technology, it's our people that make Splunk stand out as an amazing career destination and why we've won so many awards as a best place to work. If you become a Splunker, we want your whole, authentic self, what we call your "million data points". So bring your work experience, problem-solving skills and talent, of course, but also bring your joy, your passion and all the things that make you, you.

Role Summary

What you'll get to do

• Draft, review and negotiate privacy, security and data protection terms in customer, vendor, and product agreements;

• Have experience in SaaS, cloud computing, and enterprise software (minimum 4 years);
• Prior experience in at least one of the following areas: payments (and related credit and debit processing), financial services or fintech industries
• Have in-depth knowledge of global privacy, security, data protection, and financial services regulations and trends;
• Manage customer inquiries and escalations around privacy, security and data protection from the Commercial Legal team and Field Sales organizations;
• Create and provide training to the Commercial Legal and Field Sales organization for general and specific data protection issues;
• Create informational material for the Field Sales organization and Splunk’s customers about Splunk’s data protection program;
• Collaborate with legal and business clients to identify, develop and implement process improvements to the commercial aspects of Splunk’s Data Protection Program;
• Identify and draft amendments to privacy and security contractual terms and new templates or clauses as required;
• Keep up with industry guidelines that apply or relate to Splunk’s products, such as SOC2, ISO, HIPAA, PCI-DSS, OSFI, EBA Guidelines, DORA, and FedRAMP;
• Collaborate with the Commercial Legal team on contract administration, including contract process improvement, contract management tool maintenance, tracking and reporting;
• Help update and maintain Splunk’s customer RFP database;
• Have a high EQ and a strong history of successful cross-functional collaboration with others;
• Be proactive and demonstrate initiative, resourceful, and strong work ethic;

• Maintain a sense of humor and live the mantra—work hard, have fun, make history!

Must-have Qualifications

• Minimum of 6 years’ tech transactions experience, with at least 4 years’ experience in SaaS, cloud computing, and enterprise software supporting data protection (privacy and security), in-house experience strongly preferred;

• Minimum of 2 year’ prior experience in at least one of the following areas: payments (and related credit and debit processing), financial services or fintech industries
• Excellent legal drafting, project management, communication and stakeholder management skills;
• Significant experience in drafting and negotiation different agreements, especially Data Processing Agreements and Information Security
• Addendums, and the ability to provide legal advice and appropriate level of detail when communicating with internal business stakeholders;
• Solid grasp of the commercial requirements of key data protection compliance programs in the EU/US (GDPR, CCPA, HIPAA);
• Ability to act as primarily legal contact for assigned transactions;
• Foundational knowledge of key security and financial services regulations and guidelines that apply or relate to Splunk’s products such as SOC2, ISO, HIPAA, PCI-DSS and FedRAMP, OSFI, EBA Guidelines, and DORA;
• Strong written and verbal communication skills in English, with ability to speak and write clearly and concisely with a flexible style adaptable to different needs globally;
• Strong familiarity and interest in emerging technologies such as artificial intelligence, network and cyber security, infrastructure resiliency and cloud computing;
• A passion for data protection and an interest in keeping up with industry and regulatory guidelines or requirements that relate to Splunk’s products, including a fundamental understanding of how certain regulations apply to service providers of financial services entities;
• Interest in understanding Splunk products and technology; and

• Experience in Google Docs, Sheets, Slides, Word, Excel and PowerPoint.

Splunk is an Equal Opportunity Employer

At Splunk, we believe creating a culture of belonging isn’t just the right thing to do; it’s also the smart thing. We prioritize diversity, equity, inclusion, and belonging to ensure our employees are supported to bring their best, most authentic selves to work where they can thrive. Qualified applicants receive consideration for employment without regard to race, religion, color, national origin, ancestry, sex, gender, gender identity, gender expression, sexual orientation, marital status, age, physical or mental disability or medical condition, genetic information, veteran status, or any other consideration made unlawful by federal, state, or local laws. We consider qualified applicants with criminal histories, consistent with legal requirements.