Senior Counsel - Cyber and Incident Response

Overview

A leading live entertainment organization is seeking a Senior Counsel specializing in Cybersecurity and Incident Response. This role involves leading the development and enhancement of the incident response and cyber-law program, working closely with privacy, legal, and governance teams to shape incident response strategy and strengthen cybersecurity legal expertise.

Responsibilities

• Enhance the global incident response program, including policies, processes, and communications to ensure timely and comprehensive responses.
• Collaborate with the Chief Information Security Officer (CISO), technology, and product teams to translate cybersecurity principles into practical controls and implementation guidance.
• Lead contractual negotiations and risk assessments for cybersecurity vendors and products, recommending mitigations that balance innovation with accountability.
• Monitor emerging laws, regulations, and technologies to maintain a forward-looking and globally relevant governance approach.
• Advise on breach notification obligations across multiple jurisdictions and manage regulatory engagement during incidents.
• Support cybersecurity and incident response initiatives in partnership with global stakeholders, helping the business understand responsibilities and opportunities.
• Provide senior leadership with clear, actionable insights on cyber risks, trends, and strategic decisions.
• Coordinate with outside counsel, forensic firms, and other vendors critical to incident response.
• Represent the organization in regulatory discussions and industry forums related to cybersecurity and risk governance.

Requirements

• Juris Doctor (JD) degree with an active license to practice law in at least one jurisdiction.
• 8–10 years of experience in cybersecurity law, incident response, and related fields such as privacy, data governance, technology, and AI.
• Proven expertise in incident response programs, breach notification laws, and global regulatory frameworks.
• Ability to analyze technical information, including forensic and incident reports, and translate findings into legal and operational guidance.
• Strong background in governance, risk, and compliance with experience leading cross-functional programs.
• Experience collaborating with technology and product teams to implement cybersecurity controls and standards.
• Excellent communication skills with the ability to simplify complex topics and present confidently to senior audiences.
• Collaborative approach with the ability to influence diverse stakeholders without direct authority.
• Experience working in global or multi-jurisdictional environments.
• Familiarity with cyber insurance coverages and interactions with insurers.
• Technical knowledge including:
  • Fundamentals of AI and machine learning (algorithms, model lifecycle, data pipelines).
  • Cloud platforms and infrastructure (Azure, AWS, GCP) supporting AI workloads.
  • Software engineering principles such as APIs, microservices, and version control.

Preferred Qualifications

• Certifications such as CIPP/US, CIPP/E, CISSP, or GIAC.
• Experience with cloud security, SaaS environments, or large-scale digital platforms.

Compensation & Benefits

• Salary range: $180,000 to $225,000 USD, based on location, qualifications, skills, and experience.
• Comprehensive health benefits including medical, vision, dental, and mental health coverage for employees and their families.
• Access to health care concierge services and Flexible or Health Savings Accounts (FSA or HSA).
• Generous paid time off including holidays, sick leave, and personal days.
• Free concert tickets.
• 401(k) retirement plan with company match and stock reimbursement program.
• Family support programs including caregiver leave, baby bonuses, and fertility, adoption, foster, or surrogacy assistance.
• Career development opportunities including tuition reimbursement, student loan repayment, and skill development programs.
• Volunteer time off and crowdfunding match programs.

Location

City location details to be provided during the hiring process.