Senior Contract Manager, Data Protection (Legal)

Splunk is here to build a safer and more resilient digital world.
The world's leading enterprises use our unified security and observability platform to keep their digital systems secure and reliable.
While customers love our technology, it's our people that make Splunk stand out as an amazing career destination and why we've won so many awards as a best place to work.
If you become a Splunker, we want your whole, authentic self, what we call your "million data points".
So bring your work experience, problem-solving skills and talent, of course, but also bring your joy, your passion and all the things that make you, you.
Role Summary Splunk is hiring for a Senior Contract Manager to support Splunk’s commercial privacy and security program initiatives to join our team.
This role’s primary focus is to draft and negotiate privacy, security, and financial services terms in Data Processing Agreements and Information Security Addenda to align customers’ and vendors’ requirements with Splunk’s privacy, security, and financial services programs and practices.
You will work closely with members of Splunk’s Data Protection, Commercial Legal, Products, and Procurement teams to help maintain and evolve Splunk’s commercial data protection and financial services terms globally, and develop and enhance internal and external content related to privacy, security, and financial services.
The role will report to Splunk’s Sr.
Legal Counsel, Data Protection.
This role will be hybrid/remote to a Splunk Office, ideally.
What you'll get to do demonstrated ability in SaaS, cloud computing, and enterprise software Draft, review, and negotiate privacy, security and data protection terms in customer, vendor, and product agreements; Have prior experience in at least one of the following areas: payments (and related credit and debit processing), financial services or fintech industries; Have in-depth knowledge of global privacy, security, data protection, and financial services regulations and trends; Manage customer and vendor inquiries and escalations around privacy, security and data protection from the Commercial Legal team and Field Sales organizations; Create and provide training to the Commercial Legal, Field Sales, and Procurement organizations for general and specific data protection issues; Create informational material for the Commercial Legal, Field Sales, and Procurement organizations and Splunk’s customers and vendors about Splunk’s data protection program; Collaborate with legal and business clients to identify, develop and implement process improvements to the commercial aspects of Splunk’s Data Protection Program; Identify and draft amendments to privacy and security contractual terms and new templates or clauses as required; Keep up with industry guidelines that apply or relate to Splunk’s products, such as SOC2, ISO, HIPAA, PCI-DSS, OSFI, EBA Guidelines, DORA, and FedRAMP; Collaborate with the Commercial Legal team on contract administration,including contract process improvement, contract management tool maintenance, tracking and reporting; Help update and maintain Splunk’s customer RFP database; Have a high EQ and a strong history of successful cross-functional collaboration with others; Be proactive and demonstrate initiative, resourceful, and strong work ethic; Maintain a sense of humor and live the mantra—work hard, have fun, make history! Must-have Qualifications Minimum of 12 years’ experience in SaaS, cloud computing, and enterprise software supporting data protection (privacy and security), in-house experience strongly preferred; CIPP certification is a plus; Experience in at least one of the following areas: payments (and related credit and debit processing), financial services or fintech industries a plus Excellent legal drafting, project management, communication, and stakeholder management skills; Significant experience in drafting and negotiation different agreements, especially Data Processing Agreements and Information Security Addenda, and the ability to provide legal advice and appropriate level of detail when communicating with internal business stakeholders; Solid grasp of the commercial requirements of key data protection compliance programs in the EU/US (GDPR, CCPA, HIPAA); Foundational knowledge of key security and financial services regulations and guidelines that apply or relate to Splunk’s products such as SOC2, ISO, HIPAA, PCI-DSS and FedRAMP, OSFI, EBA Guidelines, and DORA; Strong written and verbal communication skills in English, with ability to speak and write clearly and concisely with a flexible style adaptable to different needs globally; Strong familiarity and interest in emerging technologies such as artificial intelligence, network and cyber security, infrastructure resiliency and cloud computing; A passion for data protection and an interest in keeping up with industry and regulatory guidelines or requirements that relate to Splunk’s products, including a fundamental understanding of how certain regulations apply to service providers of financial services entities; Interest in understanding Splunk products and technology; and Experience in Google Docs, Sheets, Slides, Word, Excel and PowerPoint Splunk is an Equal Opportunity Employer At Splunk, we believe creating a culture of belonging isn’t just the right thing to do; it’s also the smart thing.
We prioritize diversity, equity, inclusion, and belonging to ensure our employees are supported to bring their best, most authentic selves to work where they can thrive.
Qualified applicants receive consideration for employment without regard to race, religion, color, national origin, ancestry, sex, gender, gender identity, gender expression, sexual orientation, marital status, age, physical or mental disability or medical condition, genetic information, veteran status, or any other consideration made unlawful by federal, state, or local laws.
We consider qualified applicants with criminal histories, consistent with legal requirements.