Overview In this role you will lead cyber incident response and privacy matters for complex client breaches. You will work with clients, carriers, and senior technical staff to coordinate breach response and regulatory investigations. You will analyze privacy laws and draft notices, policies, and crisis communications while overseeing forensics and e-discovery. You will mentor junior team members and manage budgeting within a national firm culture that values collaboration. This is a fully remote opportunity with cross-office engagement and meaningful impact on client security posture.
Compensation / Benefits- Comprehensive benefits package
- Generous PTO
- 401(k) match
- Medical, dental, vision, life, and disability coverage
- Hybrid work flexibility
- Access to corporate discount programs
Responsibilities- Lead incident response for cybersecurity and data privacy incidents
- Oversee breach response work by Associates and coordinate with clients and carriers
- Interact with senior management and technical personnel at client companies
- Analyze state, federal, and international privacy laws
- Draft data breach notices to individuals and regulators
- Respond to regulatory investigations arising from data breaches
- Defend privacy lawsuits
- Draft privacy and security policies under HIPAA, GLBA, CCPA, and other statutes
- Triaging data breaches/incident response
- Advise clients on handling cybersecurity incidents from start to finish
- Oversee forensics investigations
- Oversee third-party vendors for e-Discovery, data mining, and notice projects
- Advise on legal notification obligations under State/Federal laws
- Draft breach notification letters to individuals and State/Federal Regulators
- Draft Crisis Communications for clients
- Respond to inquiries and investigations by State/Federal Regulators
- Interface with clients
- Draft reports to insurance carriers and clients
- Prepare legal budgets
- Supervise junior team members
Key requirements- JD from an accredited Law School
- Bar admission in good standing
- 8+ years legal experience
- 5+ years of experience in data privacy and security, with focus on data breach and incident response
- Strong knowledge of data breach and privacy laws (HIPAA, GLBA, FERPA, CCPA, GDPR)
- IT or technical background a plus
- Some litigation experience is a plus
- Excellent research, writing, and communication skills (Lexis and Westlaw)
- Ability to work in a fast-paced environment
- Team player
- team player
- excellent communication skills
- collaboration
- incident response
- data privacy and security knowledge
- HIPAA, GLBA, FERPA, CCPA, GDPR familiarity
