Sr. Cybersecurity Corporate Legal Counsel

Overview

This role is for an experienced cybersecurity attorney who provides legal counsel at the intersection of technology, regulatory requirements, contractual commitments, and business risk. The position includes serving as a primary legal advisor during actual or suspected cybersecurity incidents and advising on cybersecurity terms in customer and vendor agreements.

Responsibilities

• Serve as a primary legal advisor during actual or suspected cybersecurity incidents, including coordination with Information Security, Privacy, Compliance, Communications, HR, and business teams.
• Assess legal, regulatory, contractual, and business obligations arising from cybersecurity incidents, including notification obligations to customers, regulators, business partners, senior management, and the Board, as appropriate.
• Advise on investigation and forensic-response processes, including preservation of privilege, engagement of external counsel and forensic vendors, documentation of key decisions, and post-incident remediation.
• Provide legal guidance on U.S. and international cybersecurity laws, breach-notification requirements, regulatory inquiries, and related compliance obligations affecting systems, data, products, customers, partners, and vendors.
• Draft, review, and negotiate cybersecurity, information security, privacy, and data-protection provisions in customer, partner, and vendor agreements.
• Negotiate provisions covering security controls, encryption, data handling, incident reporting and response times, audit rights, security standards, vulnerability management, allocation of responsibilities, and third-party risk.
• Partner with technical and compliance subject-matter experts to translate security capabilities and risk positions into clear contract language and practical negotiation strategies.
• Support cybersecurity governance and compliance initiatives.
• Provide practical day-to-day counseling regarding cybersecurity, data protection and governance, enterprise IT operations, and related technology risks.
• Collaborate across Legal, Information Security, Privacy, Compliance, Engineering, Product Management, Commercial, Procurement, and other functions to enable business progress while managing risk.

Requirements

• J.D. from an accredited law school and active membership in at least one U.S. state bar.
• Eight to ten years of legal experience, with cybersecurity matters comprising a substantial part of your practice.
• Significant experience advising on cybersecurity incident response, forensic investigations, breach-notification analysis, customer notifications, and regulatory reporting.
• Experience interpreting and applying U.S. and international cybersecurity, data-protection, and incident-response requirements.
• Demonstrated experience drafting and negotiating cybersecurity, information security, privacy, and data-protection provisions in customer and vendor agreements.
• Working knowledge of cybersecurity principles, information security practices, cloud environments, data governance, and commonly used security frameworks and standards.
• Ability to independently manage complex, time-sensitive legal matters involving multiple technical, legal, and business stakeholders.
• Excellent written and verbal communication skills, including the ability to explain complex legal and technical issues clearly to legal and non-legal audiences.
• Experience advising a global technology company, whether in-house or in private practice, is strongly preferred.
• Experience with semiconductor, software, SaaS, cloud, AI, or other technology businesses is a plus.

Preferred Qualifications

• Experience advising cybersecurity and privacy matters within a global technology environment.
• Background working with semiconductor, software, SaaS, cloud, AI, or other technology businesses.

Compensation & Benefits

• A comprehensive range of health, wellness, and financial benefits.
• Total rewards include both monetary and non-monetary offerings.
• Salary range and benefits details will be provided by a recruiter during the hiring process.

Location

• Not specified.

Additional Requirements

• This position requires access to or use of information subject to export restrictions, including the International Traffic in Arms Regulations (ITAR).
• All applicants must be “U.S. Persons” within the meaning of ITAR.
• “U.S. Persons” include U.S. Citizens, U.S. Lawful Permanent Residents (i.e., “Green Card Holders”), Political Asylees, Refugees, or other protected individuals as defined by 8 U.S.C. 1324b(a)(3).