Digital Risk Advisory and Cybersecurity Associate

Baker & Hostetler LLP; Washington (District of Columbia); On-site; USD 140,000 - 230,000; Full time

Job summary

Baker & Hostetler LLP seeks a cybersecurity advisor to guide national and multinational clients through incident responses, investigations, and related advisory work. You will lead tabletop exercises, build cybersecurity programs, and perform risk assessments with strong PM and stakeholder collaboration.

Experience in privacy/cyber laws is a plus; Am Law 100 experience preferred, or 3+ years in commercial litigation with a demonstrated cybersecurity interest.

Qualifications

• Experience guiding clients through cybersecurity incident responses and regulatory investigations.
• Familiarity with privacy and cybersecurity laws (state, national, international) a plus.
• Am Law 100 experience preferred; or 3+ years of commercial litigation with cybersecurity interest.
• Strong project management and ability to translate technical findings for non-technical stakeholders.

Responsibilities

• Advise national and multinational clients on cybersecurity incidents and post-incident investigations.
• Lead advisory work including incident response tabletop exercises, program building, and risk assessments.
• Collaborate with technical teams, business units, and outside vendors to translate concepts into business guidance.

Skills

Cybersecurity

Incident response

Regulatory guidance

Project management

Non-technical communication

Stakeholder collaboration

Job description

Overview

• The role involves advising national and multinational clients on cybersecurity incidents, post-incident regulatory investigations, and general advisory work including incident response tabletops, cybersecurity program building, and risk assessments.
• Required experience includes guiding clients through the response to cybersecurity incidents and subsequent developments (regulatory inquiries and litigation), as well as advising on privacy, cybersecurity, regulatory compliance, and risk management issues.
• Familiarity with state, national, and international privacy and cybersecurity laws (e.g., state breach notice laws, CCPA, GDPR, GLBA) is a plus.
• Am Law 100 experience is preferred; alternatively, candidates with at least three years of commercial litigation experience and a demonstrated interest in cybersecurity will be considered.
• The position demands strong project management skills for complex, fast-moving matters, and the ability to translate technical concepts and forensic findings into practical business advice for non-technical stakeholders.
• A strong interest in technology, cybersecurity, and forensic investigations is valued, alongside the ability to collaborate effectively with technical professionals, business teams, and outside vendors.