Description:

We are seeking a Managing Counsel, Privacy and Security to join the company's Ethics & Compliance Department. This individual will work remotely in the United States.

Position Summary:
This position will support A Global Provider of Enterprise Software Support Company and its clients to comply with global privacy and security regulations.

The Managing Counsel, Security and Privacy will report to the GVP, Chief Counsel, Chief Ethics and Compliance Officer as part of the Ethics and Compliance Department.

Essential Duties and Responsibilities:
  • Review laws and guidance to provide advice to Privacy team, as well as Legal and Ethics and Compliance department.
  • Manage Privacy team which includes the Security and Privacy Counsel and Data Protection Specialist.
  • Manage global privacy program for the company and provide guidance to the GVP, Chief Counsel, Chief Ethics and Compliance Officer regarding compliance with privacy laws, rules and regulations.
  • Align and merge A Global Provider of Enterprise Software Support Company's privacy and security policies for mutual support and simplicity.
  • Provide legal analysis, cross-jurisdictional comparison, and other resources to the company's Question and Answer database, contracting playbooks, and sales enablement platforms.
  • Partner with sales and marketing on legal positions with regard to contracts and requests for production.
  • Partner closely with the security, product, service delivery, sales, and marketing departments to assess potential data, privacy and security risks and regulatory controls and governance for A Global Provider of Enterprise Software Support Company and client products and technologies.
  • Ensure A Global Provider of Enterprise Software Support Company's cybersecurity controls comply with A Global Provider of Enterprise Software Support Company's policies and procedures, as well as global regulatory requirements and vice versa.
  • Design strategy to align with internal and external security teams on, incident response, threat detection, containment, and mitigation.
  • Review and provide guidance and legal support on security plans and audits.
  • Develop and maintain effective policies, procedures, and documentation to demonstrate compliance; and further develop integrated strategies across A Global Provider of Enterprise Software Support Company to optimize new data use and innovations for customer benefit.
  • Advise on the continued development and improvement of policies and procedures, supporting all aspects of A Global Provider of Enterprise Software Support Company's incident response and security program.
  • Help influence and shape data security and incident management, cross border data flows, and support for regulated data and spaces.

Required Experience, Skills and Attributes
  • J.D. degree and membership in at least one state bar preferred.
  • Minimum 15+ years of relevant privacy experience working with privacy laws and principles and 5+ years of cybersecurity experience (including prior in-house or law firm experience) supporting threat detection, investigation, containment and mitigation
  • Experience with information security standards, frameworks, risk assessments, and certification processes (e.g., SOC 1, 2 & 3, ISO/IEC 27001, 27002 & 27005, NIST, etc.)
  • Experience with both US and global cybersecurity laws, regulations, and standards
  • Proven track record of advancing large, sophisticated projects.
  • Ability to communicate effectively with all levels of the organization.
  • Strategic problem solver with excellent legal and business judgment including demonstrated experience assessing information for risk mitigation opportunities.
  • A meticulous, business-friendly teammate who can think creatively.
  • Strong understanding and experience with both domestic and international privacy and security requirements.
  • Exceptional interpersonal skills with a great sense of humor and commitment to professionalism.
  • Experience working collaboratively and effectively with cross-functional teams.

Preferred Experience, Skills and Desired Attributes
  • Privacy or security certifications
  • Experience maintaining and or collaborating on a knowledge base
  • Familiarity with software development, tech, security, privacy or IP industry
  • Comfortable working remotely from a home office
  • Experience supporting an internal sales organization
  • Inherent respect for a variety of cultures
  • Openness and interest in international legal standards