Lead all aspects of data privacy and protection across the organization
Provide strategic direction for the company’s privacy compliance program, including policy development, risk assessment, incident response, and training
Collaborate closely with cross-functional teams to ensure compliance and mitigate risk
Develop and implement comprehensive data privacy and security policies and procedures
Oversee the protection of data collected by the company and ensure compliance with applicable laws and regulations
Draft, review, and negotiate privacy and security contractual clauses and data protection agreements
Monitor and assess changes in privacy laws and regulations, including CCPA, GLBA, GDPR, HIPAA, NYDFS, and others
Conduct privacy risk assessments and manage incident response for data breaches and cybersecurity events
Deliver ongoing training and education to employees on data privacy and security best practices
Support privacy-related aspects of M&A activity, including due diligence and integration planning
Requirements
Juris Doctor (JD) from an ABA-accredited law school (Required)
Licensed to practice law in any U.S. state (Required)
7+ years of sophisticated data privacy and security experience, preferably with an Am Law 200 or boutique law firm and/or in-house legal department
Experience assessing data privacy compliance and developing comprehensive data privacy and security policies
Experience addressing data breach or incidents and providing strategic advice and training on data security issues
Insurance industry, CFIUS, and/or sanctions experience a plus
Benefits
access to medical, dental, vision, life, disability, and AD&D insurance
tax-advantaged savings accounts
401(k) plan with company match
generous paid time off programs including company holidays, vacation and sick days, and new parent leave
may qualify for restricted stock units and/or a deferred compensation plan
Applicant Tracking System Keywords
Tip: use these terms in your resume and cover letter to boost ATS matches.