Senior Counsel-Privacy, Data Protection & Cybersecurity

Cybersecurity Jobs; Columbus (OH); On-site; USD 180,000 - 260,000; Full time

Benefits offered by this job

Health insurance

Paid time off

401(k)

Life Insurance

Flexible Spending Accounts

Wellness programs

Job summary

NetJets is seeking a Senior Legal Counsel to provide strategic guidance on cybersecurity, privacy, and data protection. You will lead legal oversight across incidents, regulatory matters, and vendor engagements, working with IT and business leadership to ensure compliant, risk-based decisions.

The role requires 10+ years of experience, a JD, and expertise in GDPR, CCPA/CPRA, NIST, and ISO 27001. This is an onsite Columbus, OH opportunity with a focus on risk management and enterprise policy

Qualifications

• Minimum 10+ years of relevant legal experience, ideally with both law firm and in-house work.
• Substantial experience advising on cybersecurity, data privacy, data protection, and regulatory compliance.
• Knowledge of U.S. privacy laws, state privacy laws, and data breach notification requirements.
• Experience advising on cybersecurity incidents, incident response processes, and regulatory obligations.
• Experience drafting and negotiating technology agreements and data processing agreements.

Responsibilities

• Serve as the primary legal advisor on cybersecurity, data privacy, and data protection across the organization.
• Provide guidance on federal, state, and international privacy laws, including GDPR and CCPA/CPRA.
• Lead governance, risk management, and information security policy development.
• Oversee incident response, breach notification obligations, and regulatory reporting requirements.
• Draft and negotiate data processing agreements, vendor contracts, and technology agreements.
• Advise on third-party data protection risks and cross-border data transfers.

Skills

Cybersecurity law

Data privacy

Regulatory compliance

Incident response

Contract negotiation

Risk management

Vendor management

Cross-functional liaison

Education

Juris Doctorate

Tools

NIST framework

ISO 27001

GDPR compliance

CCPA/CPRA

Job description

The Senior Legal Counsel role provides strategic legal guidance to NetJets and affiliated companies, with a primary focus on cybersecurity, data privacy, data protection, and related regulatory compliance. This position acts as a lead advisor for legal issues tied to personal and business information handling and for cybersecurity risk management and incident response.

Key Responsibilities

• Serve as the primary legal advisor and subject matter expert on cybersecurity, data privacy, and data protection across the organization.
• Provide guidance on applicable federal, state, and international privacy and data protection laws and regulations, including GDPR and CCPA/CPRA, along with other evolving privacy frameworks.
• Advise on cybersecurity governance, risk management, regulatory compliance, and the development and implementation of information security policies and procedures.
• Partner with Cybersecurity, Information Technology, and business leadership on the legal aspects of cybersecurity incidents, including incident response, investigations, breach notification obligations, and regulatory reporting requirements.
• Lead legal analysis and coordination for data breaches and other information security incidents in collaboration with internal stakeholders and external counsel as appropriate.
• Review, draft, and negotiate data privacy, data protection, cybersecurity, and information security provisions in commercial agreements, including data processing agreements, vendor contracts, and technology agreements.
• Advise on third-party data protection risks, vendor security requirements, cross-border data transfers, and contractual obligations involving sensitive information.
• Provide legal guidance on privacy-by-design principles, data governance, data retention, and emerging technologies, including artificial intelligence and related data-use considerations.
• Monitor developments in cybersecurity and privacy legislation, regulations, enforcement actions, and industry standards, including their potential impact on the organization.
• Support the development and enhancement of enterprise privacy and data protection policies, procedures, training, and compliance initiatives.
• Collaborate with internal stakeholders to assess and mitigate legal risks associated with new technologies, products, services, and business initiatives.
• Manage outside counsel and other external legal resources as necessary.
• Provide practical, business-oriented legal advice to senior leadership and cross-functional stakeholders.
• Support other corporate legal matters and special projects as assigned.

Required Qualifications

• Minimum 7 years of relevant legal experience, preferably combining law firm and in-house corporate experience.
• Substantial experience advising on cybersecurity, data privacy, data protection, and related regulatory compliance matters.
• Demonstrated knowledge of U.S. privacy and data protection laws, including state comprehensive privacy laws and data breach notification requirements, along with applicable federal regulations.
• Experience advising on cybersecurity incidents, regulatory obligations, and incident response processes.
• Experience drafting and negotiating technology agreements, data processing agreements, and contractual provisions relating to information security and data protection.
• Strong analytical, communication, negotiation, and problem-solving skills.
• Ability to provide practical legal guidance in a complex, fast-paced business environment.

Preferred Qualifications

• Experience advising multinational organizations on international privacy requirements, including GDPR and cross-border data transfers.
• Experience working directly with cybersecurity, information security, and technology leadership.
• Familiarity with cybersecurity and privacy frameworks, including NIST and ISO 27001, and related industry standards.
• Experience in a highly regulated industry, such as aviation, transportation, financial services, or technology.
• Relevant privacy or cybersecurity certifications, such as CIPP/US, CIPP/E, or CIPM.

Relevant Technologies / Frameworks

• GDPR
• CCPA/CPRA
• NIST
• ISO 27001

Additional Information

• Location: Columbus, OH, US (Onsite), 43219
• Area of Interest: Legal
• REQ ID: 18542
• Education: Juris Doctorate
• Years of Experience: 10+ years of experience

Benefits

• Medical, Dental, and Vision
• Healthcare Advocacy
• Employee Assistance Program
• Flexible Spending Accounts
• Health Savings Account with annual employer contribution
• Wellness Programs & Discounts
• Paid Time Off
• Parental Leave of Absence
• Life and Accident Insurance
• Voluntary benefits (financial protection plans)
• 401(k) plan, with 67% of every dollar you contribute through standard elective deferral and catch-up contributions matched by NetJets. Super catch-up contributions are not eligible for the employer match.
• Short and Long-Term Disability
• Legal Plan
• Identity Theft Protection Plans
• Pet Insurance
• Family & Caregiving Support

Competencies and Core Strengths

• Service-Oriented
• Curiosity
• Collaboration
• Adaptability
• Strives For Positive Results

Knowledge, Skills, Abilities and Other (KSAOs)

• Ability to independently manage complex legal matters and provide sound, risk-based recommendations.
• Strong understanding of the intersection between cybersecurity, privacy regulation, technology, and enterprise risk management.
• Ability to translate complex legal and regulatory requirements into actionable guidance for technical and nontechnical stakeholders.
• Excellent judgment, discretion, and ability to handle sensitive and confidential information.
• Strong interpersonal skills and ability to build effective partnerships across business functions.
• Ability to balance legal risk mitigation with business objectives.
• Demonstrated ability to manage multiple priorities and work effectively with senior leadership.

Note

It is not possible to list all required job duties on this form. There may be other important duties assigned, depending on the position. For a list of essential job functions, please refer to the essential functions document for this job.