Counsel (Privacy and Cybersecurity)
Company: Carvana
Location: Tempe
Posted on: February 19, 2026
|
|
|
Job Description:
Job Description Job Description COUNSEL (PRIVACY AND
CYBERSECURITY) About Carvana At Carvana, we're changing the way
people buy and sell cars. With an ambitious vision and a
fundamentally different approach designed to be fun, fast, and
fair, Carvana became the fastest-growing automotive retailer in
history. We expanded nationally, went public on the New York Stock
Exchange, sold our 1 millionth car, and reached the Fortune 500,
all in just eight years. Today, with 4 million retail customers and
counting, Carvana is both the fastest-growing and the most
profitable public automotive retailer, and we're just getting
started. We continue to raise the bar for our customers as we
tackle the enormous opportunity still ahead in the largest consumer
vertical. Working here means being part of a team that embraces
change, celebrates creative problem solving, and always strives to
be better. At Carvana, you'll have the opportunity to take on
meaningful challenges, learn quickly, and help shape the future of
automotive retail. If you're driven to grow and make an impact as
part of a collaborative team, you'll fit right in. Learn more about
what it's like to work here from the people that already do. About
the team and position Join Carvana's Legal Department in the role
of Counsel, Privacy & Cybersecurity! Carvana is looking for a
motivated and proactive attorney to provide pragmatic and
innovative advice, supporting legal and business stakeholders with
various projects and assignments involving privacy and security.
This role will report to the Senior Counsel, Privacy &
Cybersecurity. You will also work closely with a variety of other
internal business and legal partners on various matters relating to
Carvana's privacy and information security programs. As a key
member of the Privacy team, you will support proactive and reactive
legal work involving Carvana's privacy and cybersecurity interests,
including advising on the introduction of new solutions,
marketplaces, and technologies; responding to internal and external
inquiries, questionnaires, and claims; leading cross-functional
efforts to develop and improve privacy and cybersecurity processes;
and research and advise upon the ever-changing U.S. privacy and
cybersecurity legal and regulatory landscape. This is a fully
on-site position, Monday through Friday, at our corporate HQ in
Tempe, Arizona. What you'll be doing Provide quick and innovative
support to legal and business colleagues involving a wide variety
of complex questions related to privacy and cybersecurity. Analyze
statutes, regulations, case law, and other resources to stay up to
date and advise legal and business stakeholders on new and changing
privacy and cybersecurity regulations. Collaborate with our Privacy
Legal and Privacy, Data, & AI Governance teams by providing legal
guidance and support to strategically develop, update, and maintain
Carvana's operational privacy program. Assist with drafting and
refining consumer notices, consents, and terms of use, with an eye
toward clarity, brevity, and transparency, all in alignment with
Carvana's values. Review, draft, and negotiate data protection
agreements and internal privacy policies. Advise product,
engineering, and related stakeholders on privacy, data protection,
and responsible data use in connection with new features, products,
and initiatives. Provide legal guidance and support on the
implementation, maintenance, and improvement of key privacy and
data governance processes, including those involving risk and
impact assessments, privacy rights request responses, and data
retention and minimization practices. Assist with the development
of creative solutions to ensure compliance with applicable
third-party agreements, security attestations, and regulations.
Support legal investigation into and response to cyber incidents.
Support efforts to keep legal and business leadership updated and
engaged with Carvana's privacy and cybersecurity programs,
including development of internal training, guidance, and related
tools to raise awareness of privacy, cybersecurity, and data
protection topics. Foster a self-driven approach, proactively issue
spotting and working with appropriate internal and external legal
experts to generate risk-based guidance. Other duties as assigned.
What you should have/know J.D. with an active bar membership in
good standing in at least one U.S. jurisdiction. 3 years of
experience providing legal support to technology businesses at a
firm and/or within a corporate legal department setting, although
we will consider varying levels of legal experience combined with
business/industry knowledge. Superior written and verbal
communication skills. Ability to research and respond promptly to a
wide range of legal requests, summarizing and communicating legal
concepts that business stakeholders can understand and act upon.
Consistent good judgment and ability to apply legal knowledge to
help create practical business solutions. Ability to assist those
leading projects involving many cross-functional partners.
Demonstrated business acumen, strong analytical skills, and the
ability to grasp important business, legal, and financial issues
facing the company. The successful Counsel exemplifies excellent
judgment, critical and quick thinking, and an eagerness to
understand business priorities and objectives. You should feel
comfortable working amidst ambiguity, developing and navigating
priorities and daily work in collaboration with your manager and
colleagues. You work collaboratively and proactively with legal and
non-legal counterparts to generate pragmatic and effective legal
solutions to achieve business objectives while mitigating risks.
You should possess superior communication skills (oral and
written), approach problems with a sense of humor and humility, and
desire to build trusted relationships both within and outside the
organization. You have a highly collaborative nature, ownership and
accountability over your own work, proactiveness, confidence,
helpfulness, and a passion to learn about emerging technologies and
new legal risks in uncharted territories. You have a keen
understanding of how to use legal resources effectively and
strategize/execute your work efficiently to meet business goals. It
would be great if you also have CIPP certifications (e.g., CIPP/US,
CIPM) Experience advising tech companies in the areas of data
privacy and cybersecurity regulations and best practices.
Experience with process improvement. A growth mindset and a healthy
sense of humor! What we'll offer in return Full-Time salary
position with a competitive salary and Carvana stock compensation.
Medical, Dental, and Vision benefits. 401K with company match. A
multitude of perks including student loan payments, discounts on
vehicles, benefits for your pets, and much more. A great wellness
program to keep you healthy and happy both physically and mentally.
Access to opportunities to expand your skill set and share your
knowledge with others across the organization. A company culture
focused on high performance and bar-raising, with vast opportunity
to learn and grow. Other requirements To be able to do your job at
Carvana, there are some basic requirements we want to share with
you. Must be able to read, write, speak, and understand English. Of
course, we'll make any reasonable accommodations for those with
disabilities to perform the essential functions of their jobs.
Legal stuff Hiring is contingent on passing a complete background
check. This role is not eligible for visa sponsorship. Carvana is
an equal employment opportunity employer. All applicants receive
consideration for employment without regard to race, color,
religion, gender, sexual orientation, gender identity or
expression, marital status, national origin, age, mental or
physical disability, protected veteran status, or genetic
information, or any other basis protected by applicable law.
Carvana also prohibits harassment of applicants or employees based
on any of these protected categories. Please note this job
description is not designed to contain a comprehensive listing of
activities, duties, or responsibilities that are required of the
employee for this job. Duties, responsibilities, and activities may
change at any time with or without notice.
Keywords: Carvana, Casa Grande , Counsel (Privacy and Cybersecurity), Legal , Tempe, Arizona
