Global IT Cybersecurity Legal Counsel - Risk & Compliance

Jobtailor; Washington (District of Columbia); On-site; USD 150,000 - 210,000; Full time

Job summary

Medtronic seeks a senior legal advisor to guide Global IT Information Security on cybersecurity governance, regulatory compliance, and enterprise risk management within a global healthcare technology organization.

You will lead development of legal frameworks, policies, and internal controls, advising executives on strategic initiatives, incident readiness, and third‑party risk. Travel up to 25% to Medtronic facilities.

Qualifications

• JD from a recognized US law school.
• 8+ years of legal experience in cybersecurity, IT, and privacy matters.
• Licensed to practice law and in good standing in US or DC.
• Experience advising on cybersecurity governance, regulatory, enforcement, and risk management matters.
• Experience advising cross-functional business and technology stakeholders on complex legal issues.
• For degrees earned outside the US, registration requirements apply.
• Experience drafting, reviewing, and negotiating cybersecurity and third-party risk provisions.

Responsibilities

• Serve as the primary legal advisor to Global IT Information Security leadership on cybersecurity governance, regulatory compliance, enforcement matters, and enterprise risk management initiatives.
• Lead development and enhancement of cybersecurity legal frameworks, policies, standards, governance processes, and internal controls supporting global operations.
• Advise business and functional leaders on cybersecurity considerations related to strategic initiatives, technology transformation, and operational risk management.
• Support cybersecurity incident preparedness and response, including regulatory inquiries, investigations, audits, enforcement actions, and litigation.
• Conduct cybersecurity legal due diligence for mergers, acquisitions, divestitures, and other business development activities, including integration and separation planning.
• Counsel stakeholders on third-party cybersecurity risk, supply chain resilience, and contractual risk mitigation strategies.
• Partner with product security, privacy, compliance, communications, and business counsel teams on secure-by-design initiatives and enterprise cybersecurity programs.
• Monitor global cybersecurity regulatory, enforcement, and litigation developments and provide actionable guidance.
• Serve as a trusted legal advisor across a global healthcare technology organization.
• Travel up to 25%, primarily to Medtronic facilities.

Skills

Cybersecurity governance

Regulatory compliance

Contract negotiation

Legal due diligence

Mergers & acquisitions

Cross-functional collaboration

Executive communication

Education

Juris Doctor (J.D.)

Bar admission in US or DC

Job description

Medtronic seeks a senior legal advisor to guide Global IT Information Security on cybersecurity governance, regulatory compliance, and enterprise risk management within a global healthcare technology organization.

You will lead development of legal frameworks, policies, and internal controls, advising executives on strategic initiatives, incident readiness, and third‑party risk. Travel up to 25% to Medtronic facilities.