Associate Director and Counsel, Cybersecurity

Overview

An organization is seeking an Associate Director, Cybersecurity Counsel to provide legal advice and counsel related to cybersecurity and data protection within the defense industry. This role supports compliance with company policies, internal directives, and applicable federal, state, and local laws, including the Federal Acquisition Regulation (FAR) and Defense Federal Acquisition Regulation Supplement (DFARS). The position reports to the Director & Assistant General Counsel for Privacy, Cyber & Human Rights and is part of the Global Ethics & Compliance team.

This is a remote position based in the United States, requiring U.S. citizenship due to access restrictions on program information. No security clearance is required.

Responsibilities

• Provide day-to-day legal support on all aspects of cybersecurity law and data protection.
• Lead and manage data incident response investigations and reporting under legal privilege, ensuring regulatory compliance.
• Collaborate with cybersecurity subject matter experts on NIST 800-171 and Cybersecurity Maturity Model Certification 2.0 (CMMC).
• Review and negotiate purchase orders and subcontract terms to ensure compliance with company policies, FAR, DFARS, and legal requirements.
• Assist in developing, implementing, and maintaining policies, playbooks, guidance, templates, and documentation related to cybersecurity compliance, including Controlled Unclassified Information (CUI) interpretation.
• Develop and deliver cybersecurity law training for legal professionals and assist with general awareness training for employees, contractors, and third parties.
• Travel up to 10% as needed.

Requirements

• Minimum of 10 years of legal and/or compliance experience focusing on government contract law and cybersecurity requirements.
• Juris Doctor degree and active admission to practice law in the U.S.
• Experience advising on cybersecurity law, regulations, government policies, incident response, investigations, and compliance.
• Knowledge of U.S. Government procurement processes, including FAR and DFARS, with experience in contract drafting, review, and negotiations.
• Familiarity with U.S. Government and international cybersecurity controls, including Controlled Unclassified Information (CUI) and global data privacy regulations.

Preferred Qualifications

• Experience with cyber and data incident response, including DFARS reporting obligations.
• Strong investigative, analytical, written, and oral communication skills.
• Ability to make decisions efficiently and quickly with a strong sense of ownership and accountability.
• Capability to manage multiple responsibilities and projects in a fast-paced, changing environment.
• Effective team builder and collaborator.

Compensation & Benefits

• Salary range: $157,200 to $298,800 USD, depending on experience and qualifications.
• Eligibility for benefits including medical, dental, vision, life insurance, short-term and long-term disability, 401(k) match, flexible spending accounts, flexible work schedules, employee assistance programs, parental leave, paid time off, and holidays.
• Potential eligibility for annual short-term and/or long-term incentive compensation programs based on performance.
• Relocation assistance is not available.

Location

• This is a remote position requiring residence and work within one of the 50 U.S. states (excluding U.S. territories).
• Candidates may be required to attend select interview steps in person at an office location.

Additional Information

• U.S. citizenship is required due to program access restrictions.
• The application window is approximately 40 days from the posting date but may be adjusted based on candidate flow and business needs.
• The organization is an equal opportunity employer and provides affirmative action for qualified individuals with disabilities and protected veterans.