Senior Legal Counsel - Cybersecurity & Privacy

About the role

We are seeking a Senior Counsel to serve as the primary legal advisor at the intersection of cybersecurity and privacy law. This role advises on incident response, breach notification, regulatory engagement, security program requirements, security control assessments, and the privacy and regulatory implications of our products, cybersecurity architecture, and third-party risk management. The role works closely with Information Security, Risk Management, Privacy Operations, and Commercial Legal, and reports to the Chief Privacy Officer. Scope spans the US, EU, LATAM, EMEA, and APAC.

Responsibilities

• Incident response and breach notification: Lead legal analysis during security incidents and data breaches, including real-time decision-making in incident response ('war room') efforts: triage, containment, notification obligations, and regulator and customer communication strategy. Coordinate with Information Security, IT, Risk, Communications, and outside counsel.
• Regulator engagement: Engage directly with U.S. state Attorneys General and other regulators on notifications, inquiries, and investigations.
• Playbooks: Develop and maintain the global incident response plan and breach notification playbooks, aligned across US, EU, and APAC requirements.
• US regulatory advisory: Advise on US state breach notification laws, state comprehensive privacy laws (e.g., CCPA/CPRA