Senior Strategic Legal Advisor – Cybersecurity & IT Procurement to support Incident Response Efforts with our client in the Public Sector
Our client in the public sector is looking for an experienced Strategic Legal Advisor – Cybersecurity & IT Procurement to lead and support strategic contract execution related to cybersecurity, compliance, and vendor procurement. This role requires deep expertise in legal processes, cyber insurance, and handling audit-related legal findings.
Location: Hamilton, ON
Duration: 3 month contract with possibility of extension.
Hybrid Work Model: 2 days/week in office (Tues/Weds)
35 hours/week
Key Responsibilities:
- Lead the review, renewal, and negotiation of all vendor contracts, including those related to compliance, and general operations.
- Advise on and manage the cyber insurance policy and related legal documentation.
- Engage with vendors to support procurement and contract execution strategies.
- Work alongside internal stakeholders and external legal counsel as needed to ensure contracts meet organizational and regulatory standards.
- Provide legal guidance in response to audit findings and ensure resolution aligns with corporate and compliance objectives.
- Ensure adherence to legal processes for all contract execution activities.
- Support the strategic legal execution of cybersecurity-related contracts and procurement.
- Maintain awareness of current cyber risks, laws, and potential breach issues; prior experience handling breach incidents is a plus
Must Haves:
- Licensed IT or Cybersecurity Lawyer with experience in contracts and procurement.
- Strong background in cyber law, data security, and regulatory compliance.
- Experience managing cyber insurance policies and responding to breaches.
- Proven ability to negotiate with vendors and manage complex legal contracts.
- Familiarity with audit processes and translating findings into legal action.
- Excellent written and verbal communication skills.
Plusses:
- Experience working in legal advisory roles within cybersecurity or IT infrastructure domains.
- Demonstrated history of handling data breaches or similar cyber incidents