Counsel, Privacy, AI & Data Protection

Counsel, Privacy, AI & Data Protection Job Description: Arrow Electronics is a global provider of products, services, and solutions to industrial and commercial users of electronic components and enterprise computing solutions. Arrow Electronics guides innovation forward for over 220,000 leading technology manufacturers and service providers. With 2025 sales of $30.9 billion, Arrow develops technology solutions that improve business and daily life. The company maintains 228 locations worldwide with over 85 countries served.   A Fortune 154 company with 21,500 employees worldwide, Arrow brings technology solutions to a breadth of markets, including telecommunications, information systems, transportation, medical, industrial, and consumer electronics. Arrow provides specialized services and expertise across the entire product lifecycle. Arrow does this by connecting customers to the right technology at the right place, time, and price. Arrow provides extraordinary value to customers and suppliers - the best technology companies in the world - and connects them through the company's industry-leading services.   The Counsel, Privacy, AI & Data Protection serves as a strategic, pragmatic legal advisor guiding the company’s privacy, cybersecurity, AI governance, and enterprise data protection programs. This role partners closely with cross-functional teams to enable responsible innovation while ensuring compliance with evolving European, GDPR and global privacy and AI requirements.                 This role requires on site presence ; please be mindful of location when applying.   What you'll be doing? AI Governance, Responsible AI & Emerging Technology Provide legal leadership on AI governance and responsible adoption of AI/ML/LLMs, including risk-based reviews, internal controls, documentation, and oversight mechanisms (e.g., transparency, accountability, human oversight). Monitor and interpret AI legal and regulatory developments, and develop internal guidance/training aligned to best practices, frameworks, and evolving global and U.S. state automated decision-making laws. Partner with AI/Data teams to implement legal, technical, and operational requirements for AI solutions as regulations and enforcement evolve globally; support development/review of Responsible AI documentation. Privacy & Data Protection Compliance (Global) Advise on privacy and data protection laws and regulatory trends (e.g., GDPR, individual country requirements as applicable), and embed “privacy-by-design” into products and operations. Lead and/or oversee privacy impact assessments and data protection impact assessments, and maintain core privacy program artifacts (e.g., records of processing, DPIAs/PIAs). Partner with Marketing and digital teams on privacy requirements for cookies, pixels, SDKs, analytics/advertising technologies, and consent management practices. Cybersecurity & Incident Response Provide legal support for cybersecurity programs, including incident response planning and execution, investigations, audits, and regulatory inquiries related to data practices. Advise on data management and security practices supporting infrastructure/software development and advanced analytics/AI use cases (financial services or other regulated environments as applicable). Commercial Contracting, Vendor Diligence & Data/AI Agreements Draft, review, and negotiate data protection agreements, vendor and technology contracts, and privacy provisions; support procurement and vendor management processes. Conduct privacy and AI vendor diligence and governance reviews, including assessment of vendor controls and risk posture for data processing and AI capabilities. Where relevant to the business model, advise on SaaS/platform legal issues related to content compliance, datasets, model documentation (e.g., model/data cards), licensing/IP considerations, and terms of use. Program Development, Training & Stakeholder Enablement Maintain