Legal Counsel, Cyber and Product Security (Remote)

Overview

A leading organization in the Pharmaceuticals & Biotech sector is seeking a Legal Counsel specializing in Cyber and Product Security. This remote position is open to U.S.-based candidates only (no visa sponsorship available). The role involves providing legal expertise on cybersecurity and product security matters, supporting cross-functional teams, and contributing to compliance and risk management efforts.

Responsibilities

• Advise on cybersecurity laws, regulations, and frameworks, including NIST standards and FDA guidance
• Support incident and breach response protocols across product and enterprise environments
• Provide legal guidance for secure product development and vulnerability disclosure programs
• Counsel on global product launch compliance related to cybersecurity obligations
• Draft and negotiate security-related contract provisions, including third-party security diligence
• Collaborate with teams on governance, risk, and compliance issues
• Evaluate legal risks associated with product design choices such as remote connectivity or use of open-source software

Requirements

• Juris Doctor (JD) degree with a valid license to practice law in a relevant jurisdiction
• Minimum of 10 years of professional experience in law firms or corporate legal departments, preferably with a focus on cybersecurity or technology-related legal matters
• Familiarity with global cybersecurity standards and regulations, especially within healthcare or critical infrastructure sectors
• Experience advising on incident response and secure development practices
• Strong collaboration skills working with both technical and legal stakeholders

Preferred Skills and Experience

• Knowledge of NIST standards, ISO 27001, FDA Premarket/Post-market Cybersecurity Guidance, and the Cyber Resilience Act
• Experience with vulnerability disclosure programs, penetration testing, and software bills of materials (SBOMs)
• Understanding of incident response protocols, data governance practices, and open-source software compliance
• Familiarity with cybersecurity incident management tools, regulatory compliance frameworks, and cloud security practices
• Proficiency with collaboration tools used by legal and technical teams

Compensation and Benefits

• Annual salary range: $179,100 – $388,100
• Remote work flexibility
• Comprehensive health benefits
• Participation in short-term and long-term financial incentive programs
• Opportunities for professional development and training
• Inclusive and diverse work environment

Location

Remote position for U.S.-based candidates only; no visa sponsorship available.