[Hiring] Counsel – Privacy, Cybersecurity, AI & Product Technology @Stanley Black & Decker, Inc.

Role Description

The Counsel will provide practical, business-oriented legal advice for Stanley Black & Decker’s privacy, cybersecurity, artificial intelligence, technology, consumer privacy, and product compliance initiatives. Reporting to the VP, Global Privacy and Technology Governance Counsel, this role will serve as an embedded legal partner to teams across the Americas while contributing to global governance programs. The Counsel will independently manage appropriately scoped matters, collaborate with senior counsel on complex or enterprise-significant issues, and help identify and address legal risk early in the lifecycle of technology procurement, product development, commercialization, and customer engagement, with particular emphasis on technology-enabled and connected products.

Privacy, Cybersecurity & AI Advisory

• Provide day-to-day legal guidance on privacy, data protection, cybersecurity, data governance, digital compliance, and responsible AI matters.
• Support SBD’s Consumer Privacy program, including advising on consumer-facing privacy requirements, notices, consent and preference management, data subject and consumer rights processes, retention, marketing practices, and other operational privacy matters across the Americas.
• Prepare, review, and maintain Privacy Impact Assessments (PIAs) and Data Protection Impact Assessments (DPIAs) for new or changing technologies, products, services, processing activities, and business initiatives; recommend mitigation measures and track required follow-up.
• Use OneTrust to manage privacy intake, assessment workflows, records, approvals, reporting, and evidence of compliance.
• Conduct privacy, security, and AI risk assessments and provide practical recommendations to business and functional stakeholders.
• Translate legal and regulatory requirements into practical controls, playbooks, contract positions, product requirements, and business guidance.
• Monitor relevant legal and regulatory developments across the Americas and support impact assessments, readiness planning, policies, standards, and training.
• Support incident preparedness and response, including legal research, fact development, documentation, notification analysis, and coordination with Cybersecurity, IT, Privacy, Communications, and outside counsel.
• Manage AI governance intake, risk review, approvals, documentation, acceptable-use guardrails, and ongoing monitoring for appropriately scoped matters.

Technology Procurement & Contracting

• Partner with Global Supply Management and its counsel, IT, Cybersecurity, Privacy, and business stakeholders throughout vendor intake, diligence, sourcing, negotiation, onboarding, and lifecycle management.
• Independently review, draft, and negotiate routine and moderately complex technology-related agreements and exhibits, including SaaS, cloud, software, professional services, data processing and transfer terms, cybersecurity requirements, AI terms, statements of work, technology licensing terms, and confidentiality agreements.
• Support and, where appropriate, lead customer-facing commercial negotiations involving technology products, digital services, connected products, data use, cybersecurity, privacy, AI, audit rights, regulatory commitments, and allocation of risk.
• Apply established contracting playbooks and escalation criteria, identify nonstandard or higher-risk positions, develop practical alternatives, and present concise recommendations to senior counsel and business partners.
• Develop and maintain reusable clauses, guidance, checklists, and training that improve consistency and speed across procurement and commercial sales channels.

Product & Connected Product Compliance

• Advise product, engineering, digital, cybersecurity, marketing, sales, quality, and regulatory teams on legal requirements affecting technology-enabled and connected products.
• Support and independently manage appropriately scoped product development and go-to-market reviews involving privacy by design, secure by design, AI-enabled features, consumer transparency, data collection and use, connectivity, software, digital services, and product claims.
• Assess product compliance obligations across relevant Americas markets and coordinate with senior, local, and subject-matter counsel where specialized advice is required.
• Review product documentation, disclosures, notices, terms, instructions, internal approvals, and evidence of compliance.
• Support issue escalation and remediation when product, cybersecurity, privacy, AI, regulatory, or customer requirements intersect, presenting clear facts, options, and recommendations.

Americas Business Partnership

• Serve as a responsive legal partner to business teams across the United States, Canada, Latin America, and the Caribbean, with particular focus on Spanish- and Portuguese-speaking markets.
• Build trusted relationships with regional legal, commercial, procurement, digital, product, IT, cybersecurity, privacy, and compliance stakeholders.
• Deliver practical education and localized guidance that reflects regional law, language, business context, and global SBD standards.
• Prioritize and manage regional matters within the role’s scope, escalating complex, novel, or high-risk issues with clear facts, analysis, and recommended next steps.

Qualifications

• Juris Doctor or equivalent law degree and authorization to practice law in at least one relevant jurisdiction.
• Approximately 5–10 years of progressively responsible legal experience in a law firm, corporate legal department, government, or comparable setting.
• Demonstrated experience in several of the following areas: privacy and data protection, cybersecurity, technology transactions, AI governance, commercial law, consumer privacy, product compliance, or connected products.
• Demonstrated experience preparing, reviewing, and documenting Privacy Impact Assessments (PIAs) and Data Protection Impact Assessments (DPIAs).
• Hands-on experience using OneTrust to support privacy assessments, workflows, records, reporting, and related privacy program activities.
• Ability to independently analyze complex legal and technical information, identify material issues, and convert findings into clear, commercially practical advice.
• Strong legal research, drafting, negotiation, project management, organization, and written and verbal communication skills.
• Sound judgment, ownership, responsiveness, and the ability to recognize when escalation or additional subject-matter support is appropriate.
• Ability to work collaboratively across functions, cultures, time zones, and levels of seniority in a fast-moving global organization.
• Professional fluency in English and Spanish and/or Portuguese.

Benefits

• Medical, dental, life, vision, disability, 401(k), Employee Stock Purchase Plan, paid time off, and tuition reimbursement.
• Discounts on Stanley Black & Decker tools and other partner programs.