You will:

📍Provide subject-matter expertise and guidance on evolving data security and privacy legislation, evolving regulations, and enforcement and translate your analysis into clear, concise, and actionable guidance. 📍Advise on global and domestic data security and privacy laws, regulations, and industry best practices for cybersecurity. 📍Remain up-to-date on relevant data security and privacy laws and regulations and evolving industry standards to provide an ongoing ability to provide sound compliance advice 📍Engage with the Incident Response Team during incidents. Provide guidance during the incident, including impact analysis, breach reporting to regulators, and customer notification. 📍Participate in security incident retrospectives, propose and provide guidance on repair items. 📍Provide insights and guidance on security policies with the Governance, Risk, and Compliance Team. 📍Be a subject matter expert on data security and privacy for inputs into Quantified Risk. 📍Report to Senior Lead Counsel, Privacy.

You have:

📍5+ years of data security, data privacy, data protection and governance experience. 📍Expertise in US and global data security and protection laws and regulations. 📍Knowledge of cybersecurity regulations and frameworks, such as GDPR, COPPA, NIST CSF, and PCI. 📍Experience working with Information Security teams, including Incident Response, Application Security and Governance. 📍Experience with security incidents including, breaches, breach reporting to regulators, customer notifications. 📍Experience implementing global data protection and security requirements. 📍Train at a major national law firm; in-house experience a plus. 📍Active membership in at least one U.S. state bar; California Bar admission preferred. 📍Excellent business-oriented judgment.