Senior Counsel-Privacy, Data Protection & Cybersecurity

NetJets; Columbus (OH); Vor Ort; USD 180.000 - 240.000; Vollzeit

Benefits dieser Stelle

Medical benefits

Dental benefits

Vision benefits

401(k) plan

Paid time off

Zusammenfassung

NetJets seeks a Senior Legal Counsel to lead cybersecurity, data privacy, and data protection initiatives across the organization. You will guide regulatory compliance, incident response, and privacy-by-design considerations while partnering with IT, Cybersecurity, and business leadership.

You will draft and negotiate data processing and technology agreements, assess cross-border transfers, and advise senior management on risk with practical, business-focused guidance.

Qualifikationen

• Minimum 7 years of legal experience with cybersecurity/privacy focus.
• Experience drafting technology and data processing agreements.
• Knowledge of U.S. privacy laws and data breach requirements.

Aufgaben

• Provide legal guidance on cybersecurity, privacy, and data protection.
• Advise on regulatory compliance and incident response processes.
• Draft and negotiate data processing and technology agreements.
• Collaborate with IT, Cybersecurity, Compliance, and leadership on risk mitigation.

Kenntnisse

Cybersecurity

Data privacy

Data protection

Regulatory compliance

Legal risk management

Technology agreements

Incident response

Ausbildung

Juris Doctorate

Jobbeschreibung

Join the NetJets Team

NetJets, the global private aviation leader for more than 60 years, provides the pinnacle of private travel, defined by a signature commitment to unwavering safety, personalized service, and reliable global access. Discover why NetJets is the ultimate career destination, offering exceptional benefits and growth opportunities.

Purpose of Position

The Senior Legal Counsel provides legal advice and guidance to NetJets and its affiliated companies on a broad range of legal and business matters, with primary responsibility for cybersecurity, data privacy, data protection, and related regulatory compliance.

This position will serve as the organization’s lead legal advisor on matters involving the collection, use, protection, retention, and disclosure of personal and business information, as well as cybersecurity risk management and incident response.

The Senior Legal Counsel will partner closely with Information Technology, Cybersecurity, Information Security, Compliance, Human Resources, and business leadership to identify and mitigate legal risks while supporting the company’s strategic objectives.

Tasks And Responsibilities

• Serve as the primary legal advisor and subject matter expert on cybersecurity, data privacy, and data protection matters across the organization.
• Provide legal guidance on applicable federal, state, and international privacy and data protection laws and regulations, including GDPR, CCPA/CPRA, and other evolving privacy frameworks.
• Advise on cybersecurity governance, risk management, regulatory compliance, and the development and implementation of information security policies and procedures.
• Partner with Cybersecurity, Information Technology, and business leadership on the legal aspects of cybersecurity incidents, including incident response, investigations, breach notification obligations, and regulatory reporting requirements.
• Lead legal analysis and coordination of data breaches and other information security incidents, working with internal stakeholders and external counsel as appropriate.
• Review, draft, and negotiate data privacy, data protection, cybersecurity, and information security provisions in commercial agreements, including data processing agreements, vendor contracts, and technology agreements.
• Advise on third-party data protection risks, vendor security requirements, cross-border data transfers, and contractual obligations involving sensitive information.
• Provide legal guidance on privacy-by-design principles, data governance, data retention, and emerging technologies, including artificial intelligence and related data-use considerations.
• Monitor developments in cybersecurity and privacy legislation, regulations, enforcement actions, and industry standards, assessing their potential impact on the organization.
• Support the development and enhancement of enterprise privacy and data protection policies, procedures, training, and compliance initiatives.
• Collaborate with internal stakeholders to assess and mitigate legal risks associated with new technologies, products, services, and business initiatives.
• Manage outside counsel and other external legal resources as necessary.
• Provide practical, business-oriented legal advice to senior leadership and cross-functional stakeholders.
• Support other corporate legal matters and special projects as assigned.

Experience

• Minimum of 7 years of relevant legal experience, preferably combining law firm and in-house corporate experience.
• Substantial experience advising on cybersecurity, data privacy, data protection, and related regulatory compliance matters.
• Demonstrated knowledge of U.S. privacy and data protection laws, including state comprehensive privacy laws, data breach notification requirements, and applicable federal regulations.
• Experience advising on cybersecurity incidents, regulatory obligations, and incident response processes.
• Experience drafting and negotiating technology agreements, data processing agreements, and contractual provisions relating to information security and data protection.
• Strong analytical, communication, negotiation, and problem-solving skills.
• Ability to provide practical legal guidance in a complex, fast-paced business environment.

Preferred

• Experience advising multinational organizations on international privacy requirements, including GDPR and cross-border data transfers.
• Experience working directly with cybersecurity, information security, and technology leadership.
• Familiarity with cybersecurity and privacy frameworks, including NIST, ISO 27001, and related industry standards.
• Experience in a highly regulated industry, such as aviation, transportation, financial services, or technology.
• Relevant privacy or cybersecurity certifications, such as CIPP/US, CIPP/E, or CIPM.

Note

It is not possible to list all required job duties on this form. There may be other important duties assigned, depending on the position. For a list of essential job functions, please refer to the essential functions document for this job.

Education

Juris Doctorate

Years Of Experience

10+ years of experience

Core Competencies

• Service-Oriented
• Curiosity
• Collaboration
• Adaptability
• Strives For Positive Results

Knowledge, Skills, Abilities And Other (KSAOs)

• Ability to independently manage complex legal matters and provide sound, risk-based recommendations.
• Strong understanding of the intersection between cybersecurity, privacy regulation, technology, and enterprise risk management.
• Ability to translate complex legal and regulatory requirements into actionable guidance for technical and nontechnical stakeholders.
• Excellent judgment, discretion, and ability to handle sensitive and confidential information.
• Strong interpersonal skills and ability to build effective partnerships across business functions.
• Ability to balance legal risk mitigation with business objectives.
• Demonstrated ability to manage multiple priorities and work effectively with senior leadership.

How NetJets Supports You

NetJets is proud to provide a variety of attractive benefits to our employees, including many at no cost. Employees have access to no cost options including Medical, Dental, and Vision benefits, with access to robust networks of nationwide providers.

Our Comprehensive Suite Of Benefits Include

• Medical, Dental, and Vision
• Healthcare Advocacy
• Employee Assistance Program
• Flexible Spending Accounts
• Health Savings Account with annual employer contribution
• Wellness Programs & Discounts
• Paid Time Off
• Parental Leave of Absence
• Life and Accident Insurance
• Voluntary benefits (financial protection plans)
• 401(k) plan, with 67% of every dollar you contribute through standard elective deferral and catch-up contributions matched by NetJets. Super catch-up contributions are not eligible for the employer match.
• Short and Long-Term Disability
• Legal Plan
• Identity Theft Protection Plans
• Pet Insurance
• Family & Caregiving Support