At Moody's, we unite the brightest minds to turn today’s risks into tomorrow’s opportunities. We do this by striving to create an inclusive environment where everyone feels welcome to be who they are—with the freedom to exchange ideas, think innovatively, and listen to each other and customers in meaningful ways. Moody’s is transforming how the world sees risk. As a global leader in ratings and integrated risk assessment, we’re advancing AI to move from insight to action—enabling intelligence that not only understands complexity but responds to it. We decode risk to unlock opportunity, helping our clients navigate uncertainty with clarity, speed, and confidence.

If you are excited about this opportunity but do not meet every single requirement, please apply! You still may be a great fit for this role or other open roles. We are seeking candidates who model our values: invest in every relationship, lead with curiosity, champion diverse perspectives, turn inputs into actions, and uphold trust through integrity.

Skills and Competencies.

• 3+ years of experience at a multinational company, specializing in integrating privacy principles into system and product architecture.
• Strong knowledge of global privacy laws, privacy principles, data anonymization, security engineering, and data governance, with expertise in privacy risk analysis and mitigation strategies.
• Experience in mapping and managing data flows for privacy risk assessments to ensure compliance and minimize risks.
• Skilled in translating technical and legal concepts across teams, maintaining accurate records, and balancing regulatory risks with business objectives through collaboration.

Education.

• Bachelor's degree in paralegal studies, business administration, risk management computer science, data engineering, or a related field.

Responsibilities.

• Conduct privacy risk assessments for new products and processes, analyze personal data flows and roles (e.g., "data controller" or "data processor"), and identify privacy risks alongside potential mitigation strategies for Moody’s, its vendors, and customers.
• Advise product and infrastructure teams on privacy-by-design principles and privacy-enhancing technologies, including data minimization, anonymization, masking, and consent management solutions for system design and implementation.
• Collaborate across teams, including Compliance, Product, Risk, Information Security, and Data Strategy, acting as a technical translator between legal and business requirements.
• Lead privacy documentation, including privacy notices, consents, data protection authority filings, and research on Latin American data privacy law updates.
• Leverage technology to enhance Privacy Team workflows, such as automating processes with Agentic AI for logging and tracking privacy review requests or data incidents.

About the team.

The Global Privacy Legal Team sits within Moody’s Legal Department and is the centre of excellence for privacy advice for Moody’s, supporting all functions, lines of business and 100% and majority-owned affiliates of Moody’s Corporation, Moody’s Investors Services, Inc. and Moody’s Analytics, Inc.

Moody’s is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability, protected veteran status, sexual orientation, gender expression, gender identity or any other characteristic protected by law.

Candidates for Moody's Corporation may be asked to disclose securities holdings pursuant to Moody’s Policy for Securities Trading and the requirements of the position. Employment is contingent upon compliance with the Policy, including remediation of positions in those holdings as necessary.

For more information on the Securities Trading Program, please refer to the STP Quick Reference guide on ComplianceNet

Please note: STP categories are assigned by the hiring teams and are subject to change over the course of an employee’s tenure with Moody’s.