Counsel (Privacy and Cybersecurity) at Carvana

COUNSEL (PRIVACY AND CYBERSECURITY) About Carvana At Carvana, we’re changing the way people buy and sell cars. With an ambitious vision and a fundamentally different approach designed to be fun, fast, and fair, Carvana became the fastest-growing automotive retailer in history. We expanded nationally, went public on the New York Stock Exchange, sold our 1 millionth car, and reached the Fortune 500, all in just eight years. Today, with 4 million retail customers and counting, Carvana is both the fastest-growing and the most profitable public automotive retailer, and we’re just getting started. We continue to raise the bar for our customers as we tackle the enormous opportunity still ahead in the largest consumer vertical. Working here means being part of a team that embraces change, celebrates creative problem solving, and always strives to be better. At Carvana, you’ll have the opportunity to take on meaningful challenges, learn quickly, and help shape the future of automotive retail. If you’re driven to grow and make an impact as part of a collaborative team, you’ll fit right in. Learn more about what it’s like to work here from the people that already do. About the team and position Join Carvana’s Legal Department in the role of Counsel, Privacy & Cybersecurity! Carvana is looking for a motivated and proactive attorney to provide pragmatic and innovative advice, supporting legal and business stakeholders with various projects and assignments involving privacy and security. This role will report to the Senior Counsel, Privacy & Cybersecurity. You will also work closely with a variety of other internal business and legal partners on various matters relating to Carvana’s privacy and information security programs. As a key member of the Privacy team, you will support proactive and reactive legal work involving Carvana’s privacy and cybersecurity interests, including advising on the introduction of new solutions, marketplaces, and technologies; responding to internal and external inquiries, questionnaires, and claims; leading cross-functional efforts to develop and improve privacy and cybersecurity processes; and research and advise upon the ever-changing U.S. privacy and cybersecurity legal and regulatory landscape. This is a fully on-site position, Monday through Friday, at our corporate HQ in Tempe, Arizona. What you’ll be doing • Provide quick and innovative support to legal and business colleagues involving a wide variety of complex questions related to privacy and cybersecurity. • Analyze statutes, regulations, case law, and other resources to stay up to date and advise legal and business stakeholders on new and changing privacy and cybersecurity regulations. • Collaborate with our Privacy Legal and Privacy, Data, & AI Governance teams by providing legal guidance and support to strategically develop, update, and maintain Carvana’s operational privacy program. • Assist with drafting and refining consumer notices, consents, and terms of use, with an eye toward clarity, brevity, and transparency, all in alignment with Carvana’s values. • Review, draft, and negotiate data protection agreements and internal privacy policies. • Advise product, engineering, and related stakeholders on privacy, data protection, and responsible data use in connection with new features, products, and initiatives. • Provide legal guidance and support on the implementation, maintenance, and improvement of key privacy and data governance processes, including those involving risk and impact assessments, privacy rights request responses, and data retention and minimization practices. • Assist with the development of creative solutions to ensure compliance with applicable third-party agreements, security attestations, and regulations. • Support legal investigation into and response to cyber incidents. • Support efforts to keep legal and business leadership updated and engaged with Carvana’s privacy and cybersecurity programs, including development of internal training, guidance, and related tools to raise awareness of privacy, cybersecurity, and data protection topics. • Foster a self-driven approach, proactively issue spotting and working with appropriate internal and external legal experts to generate risk-based guidance. • Other duties as assigned. What you should have/know • J.D. with an active bar membership in good standing in at least one U.S. jurisdiction. • 3+ years of experience providing legal support to technology businesses at a firm and/or within a corporate legal department setting, although we will consider varying levels of legal experience combined with business/industry knowledge. • Superior written and verbal communication skills. • Ability to research and respond promptly to a wide range of legal requests, summarizing and communicating legal concepts that business stakeholders can understand and act upon. • Consistent good judgment and ability to apply legal knowledge to help create practical business solutions. • Ability to assist those leading projects involving many cross-functional partners. • Demonstrated business acumen, strong analytical skills, and the ability to grasp important business, legal, and financial issues facing the company. • The successful Counsel exemplifies excellent judgment, critical and quick thinking, and an eagerness to understand business priorities and objectives. • You should feel comfortable working amidst ambiguity, developing and navigating priorities and daily work in collaboration with your manager and colleagues. • You work collaboratively and proactively with legal and non-legal counterparts to generate pragmatic and effective legal solutions to achieve business objectives while mitigating risks. • You should possess superior communication skills (oral and written), approach problems with a sense of humor and humility, and desire to build trusted relationships both within and outside the organization. • You have a highly collaborative nature, ownership and accountability over your own work, proactiveness, confidence, helpfulness, and a passion to learn about emerging technologies and new legal risks in uncharted territories. • You have a keen understanding of how to use legal resources effectively and strategize/execute your work efficiently to meet business goals. It would be great if you also have • CIPP certifications (e.g., CIPP/US, CIPM) • Experience advising tech companies in the areas of data privacy and cybersecurity regulations and best practices. • Experience with process improvement. • A growth mindset and a healthy sense of humor! What we’ll offer in return • Full-Time salary position with a competitive salary and Carvana stock compensation. • Medical, Dental, and Vision benefits. • 401K with company match. • A multitude of perks including student loan payments, discounts on vehicles, benefits for your pets, and much more. • A great wellness program to keep you healthy and happy both physically and mentally. • Access to opportunities to expand your skill set and share your knowledge with others across the organization. • A company culture focused on high performance and bar-raising, with vast opportunity to learn and grow. Other requirements To be able to do your job at Carvana, there are some basic requirements we want to share with you. • Must be able to read, write, speak, and understand English. Of course, we’ll make any reasonable accommodations for those with disabilities to perform the essential functions of their jobs. Legal stuff Hiring is contingent on passing a complete background check. This role is not eligible for visa sponsorship. Carvana is an equal employment opportunity employer. All applicants receive consideration for employment without regard to race, color, religion, gender, sexual orientation, gender identity or expression, marital status, national origin, age, mental or physical disability, protected veteran status, or genetic information, or any other basis protected by applicable law. Carvana also prohibits harassment of applicants or employees based on any of these protected categories. Please note this job description is not designed to contain a comprehensive listing of activities, duties, or responsibilities that are required of the employee for this job. Duties, responsibilities, and activities may change at any time with or without notice.