Team Introduction
We are seeking a data privacy subject matter expert and a solution-driven counsel to join us as a Data Privacy Counsel and DPO to support Ant International's business in LATAM. The individual will work closely with business development personnel, financial institutions, risk management and other legal/compliance/AML/data privacy professionals, as well as tech and operations teams for Ant International's businesses in LATAM. The Data Privacy Counsel and DPO will work with such parties to implement and monitor data protection and privacy policies and ensure compliance with applicable data privacy law and regulations.
Compliance:
* Advise on and support the management of Ant International's privacy compliance program across Latin America, including reviewing and drafting privacy notices, internal policies, and data processing agreements in accordance with local laws.
* Manage data subject rights requests and internal processes for responding to individual access, correction, deletion, and opt-out requests under applicable LATAM data protection laws.
* Interpret and monitor evolving data protection, cybersecurity, and privacy regulations across key LATAM jurisdictions (including Brazil, Mexico, Colombia, Argentina, Peru and Chile), and collaborate with legal, compliance, InfoSec, IT, and customer service teams to implement compliant practices.
* Monitor, analyze, and assess regulatory developments—including new laws, regulations, enforcement actions, and guidance from data protection authorities (e.g., ANPD in Brazil, INAI in Mexico)—and provide actionable legal advice to ensure compliance across multiple jurisdictions.
* Serve as a point of contact for regulatory engagements, including responding to RFIs (requests for information) and coordinating with local regulators where necessary, in collaboration with external counsel.
Product:
* Provide privacy and data protection guidance for new product launches and business initiatives across the LATAM region, including participation in product development meetings, privacy risk assessments, and cross-border data transfer impact analyses.
* Evaluate privacy implications of product features, data flows, and commercial use cases, offering practical, risk-based solutions that support innovation while ensuring compliance with local requirements.
* Coordinate privacy reviews across multiple LATAM jurisdictions, including engaging external counsel when needed, to support timely and compliant product rollouts across the region.
* Proactively identify and advise on privacy-related risks in ongoing projects, especially those involving sensitive data, automated decision-making, or cross-border data transfers.
Other Responsibilities:
* Conduct and support privacy impact assessments (PIAs) and data protection impact assessments (DPIAs) in alignment with regional requirements.
* Maintain internal compliance records, data inventories, and documentation required under local laws (e.g., data processing registries).
* Deliver training and awareness sessions for internal stakeholders on LATAM privacy laws, compliance obligations, and best practices.
* Support incident response efforts, including assessing data breaches under local notification timelines and requirements, and coordinating with cross-functional teams.
* Assist in audit readiness, due diligence for partnerships or acquisitions, and regulatory license or registration processes involving data handling.
Requirements:
* Qualified to practice law in at least one LATAM jurisdiction (e.g., Brazil or Mexico) or in a recognized international jurisdiction with demonstrated experience in LATAM privacy law.
* 5–10 years of relevant legal experience, preferably in a top-tier law firm or as in-house counsel, with a strong focus on data privacy and regulatory compliance.
* In-depth knowledge of data protection laws in key LATAM markets, including Brazil's LGPD, Mexico's LFPDPPP, Argentina's PDPA, and other relevant frameworks.
* Experience engaging with LATAM data protection authorities or handling cross-border compliance issues in the region is highly desirable.
* Experience in financial services, fintech, or digital payments is a strong plus, given the nature of the business.
* Strong commercial acumen and ability to balance legal risk with business objectives in a fast-growing, dynamic environment.
* Proven ability to work independently, manage multiple priorities, and deliver pragmatic legal advice under tight deadlines.
* Goal-oriented, results-driven, and focused on execution and deliverables.
* Practical problem-solver with excellent communication skills, capable of providing clear, concise, and actionable guidance to internal stakeholders.
* Collaborative team player with the ability to work effectively across cultures and time zones, and build strong relationships with international and regional teams.