Director Legal Cybersecurity

You will serve as lead cybersecurity counsel and legal partner to the CISO and Security organization. You will lead incident-response strategy, breach notifications, cyber disclosures, security compliance, regulatory engagement, commercial security terms, and third-party risk work. You will advise executives and the Board, manage external counsel, and create playbooks and training.

Responsibilities

• Advise Security on programs, policies, controls, and risk decisions.
• Build and lead cybersecurity legal and regulatory compliance programs.
• Advise on SOC 2, ISO 27001, NIST CSF, FedRAMP, and CMMC.
• Lead legal strategy for security incidents, privileged investigations, notifications, and regulator engagement.
• Support SEC materiality assessments and cybersecurity disclosures.
• Design incident-response playbooks and executive tabletop exercises.
• Monitor cyber regulations and manage engagement with regulators.
• Advise on security terms, due diligence, and contractual controls for customers and suppliers.
• Advise on cyber insurance, M&A diligence, vulnerability disclosure, bug bounties, and security research.
• Build security-legal awareness through playbooks and training.

Requirements

• U.S.-qualified attorney with 10+ years of experience.
• Significant in-house cybersecurity or security-counsel experience, or exceptional private-practice experience.
• Experience leading legal responses to significant security incidents.
• Knowledge of SEC cybersecurity disclosure requirements and public-company governance.
• Knowledge of U.S. cyber and data-security laws and international regimes including NIS2, DORA, and UK and EU GDPR security obligations.
• Ability to understand technical controls and translate risk into business decisions.
• Excellent executive and Board communication skills.

Benefits

• Medical, dental, and vision coverage.
• Flexible paid time off.
• Parental leave.
• Retirement plan participation.