阿里巴巴全球速卖通事业部(AliExpress)-法务专家-数据保护
任职要求
Legal qualification to practice law, preferably Singapore, Hong Kong, or England and Wales. 5+ years of post-qualification experience at a leading law firm and/or corporation. In-house experience is welcome (especially if e-commerce/tech related), but not mandatory. Data privacy experience at least 3 years, working knowledge of China data laws and GDPR or other privacy regime (CCPA, PDPA, PIPEDA etc.) preferred. Professional proficiency in both English and Chinese. Highly-motivated and able to work independently and under pressure in a start-up environment. Sincere interest in data privacy, e-commerce, technology, innovation and business. Strong commercial sense with solid foundation in legal training. High integrity and desire to collaborate with others. Open to frequent travel when feasible.
工作职责
Reporting to Senior Legal Counsel, advise on data privacy aspects of our e-commerce business’ global expansion of current and proposed new initiatives. Provide advice to business teams on data privacy aspects of the implementation of business models and strategies, business operations, product offerings, marketing activities and commercial agreements. Partnering with business, tech, product and information security functions respectively, set up and maintain the data privacy framework and programs on e-commerce related activities. Negotiate, draft, and review data processing agreements and other contractual work relating to data privacy. Develop in-house legal tools and policies relating to data privacy, and conduct trainings to business units. Research local laws and regulations in foreign jurisdictions and manage outside counsel.
1、对境内数据保护及数据安全相关法律法规和要求,进行解读与风险判断; 2、完善境内数据合规相关的基础设施,建立体系化数据合规管线; 3、针对米哈游境内业务中的具体场景进行数据合规风险的识别、防范和处置,为业务开展和规范运作提供可操作性合规建议与风险控制方案; 4、与团队内的境外合规部分沟通协作,落实和推动全球化的数据合规解决思路。
1. 负责海外采购类合同的起草、审核、修改与谈判,涵盖机房租赁、设备采购、技术服务等; 2. 为海外IDC(互联网数据中心)建设项目提供全流程法律支持,包括开服评估、业务运营合规风险评估、EHS合规运营、资产处置合规等业务全生命周期的风险预防、风险识别与治理; 3. 协助处理与境外供应商的谈判事宜,识别并控制潜在法律风险; 4. 为业务团队提供法律咨询和支持,解答项目过程中遇到的各种法律问题,提供有效的法律合规及风险防范建议; 5. 处理各类突发事件、组织应对监管检查、处理临时交办的项目或相关工作及其他日常工作法务支持工作; 6. 规划并组织体系化、针对业务的法务培训。

1、能独立支持公司国内外数据合规相关工作,为业务提供关于数据合规和隐私保护法律意见,能够独立支持国内外产品功能/业务模式、算法模型、对外合作等方面进行全面的数据合规或个保评估,并制定合规方案;制定国内外产品或业务的数据隐私保护政策、规范和指南; 2、独立支持所负责业务线的全生命周期法务需求,包括但不限于深度参与业务产品规划设计,对业务产品方案及运营管理策略进行法律评估,并提供可操作的解决方案;全面高效识别业务运营和创新拓展过程中的法律风险,尤其是经营合规和营销风险,并制定风险管控流程与机制; 3、负责组织和拟定负责业务线法律文件的起草、审核、签订及相关争议解决等,能独立参与对外谈判; 4、对业务部门提供法律咨询和指导,对业务团队提供数据合规、业务合规相关法律培训; 5、把握最新的数据合规及业务线相关监管动向,保障业务的合规性开展;根据法律法规及主管部门的要求制定数据/业务合规优化方案,并协调各个部门落实推进。