Senior Cyber Incident Response Attorney

Key Responsibilities

• Taking lead responsibility in responding to clients and carriers, and overseeing breach response work by Associates
• Interaction with senior level management and technical personnel at client companies
• Analyzing state, federal, and international privacy laws
• Drafting legal notices of a data breach to individuals and regulators
• Responding to regulatory investigations arising out of a data breach
• Defending privacy lawsuits
• Drafting privacy and security policies and procedures pursuant to HIPAA, GLBA, CCPA, and other statutes
• Triaging data breaches/incident response
• Advising clients on handling cybersecurity incident from start to finish
• Oversight of forensics investigations
• Oversight of third party vendors for e-Discovery, data mining, and notice projects
• Advising clients on legal notification obligations under State/Federal laws
• Drafting breach notification letters to individuals and State/Federal Regulators
• Drafting Crisis Communications for clients
• Responding to inquiries and investigations by State/Federal Regulators
• Interfacing with clients
• Drafting reports to insurance carriers and clients
• Preparing legal budgets
• Supervising junior team members

Qualifications

• JD from an accredited Law School is required
• Must be admitted to Bar in good standing
• 8+ years legal experience
• 5+ years of experience in data privacy and security, with particular focus on data breach and incident response
• Strong knowledge of data breach and privacy laws (HIPAA, GLBA, FERPA, CCPA, GDPR, etc.)
• IT or technical background a plus
• Some litigation experience is a plus
• Excellent research, writing, and communication skills (Lexis and Westlaw)
• Ability to work in a fast-paced environment
• Team player