Senior Cyber Incident Response Attorney (Remote)

Wilson Elser; United States; Remote; USD 180,000 - 320,000; Full time

Benefits offered by this job

Meaningful Work

Collaborative Culture

Advancement

Hybrid Flexibility

Comprehensive Benefits

Additional Perks

Job summary

Wilson Elser is seeking a Senior Cyber Incident Response Attorney for a fully remote role with national reach. The position emphasizes defending complex cybersecurity-related matters and incident response leadership.

Ideal candidates have 8+ years of legal experience, 5+ years in data privacy and incident response, and strong research and writing skills. Bar admission is required, with flexible regional office reporting possible.

Qualifications

• JD required and must be admitted to the Bar in good standing.
• 8+ years legal experience with 5+ years in data privacy and security focused on breach/incident response.
• Strong knowledge of HIPAA, GLBA, FERPA, CCPA, GDPR, etc.
• IT or technical background is a plus; litigation experience is a plus.

Responsibilities

• Lead incident response for cybersecurity and data privacy incidents.
• Oversee breach response work by associates and coordinate with clients and carriers.
• Interact with senior management and technical personnel at client organizations.
• Draft notices of data breaches to individuals and regulators; respond to regulatory investigations.
• Draft policies and procedures for privacy and security, including HIPAA, GLBA, CCPA, GDPR.
• Manage third party vendors for e-Discovery, data mining, and notice projects.
• Supervise junior team members and manage budgets.

Skills

Strong research skills

Excellent writing and communication

Team player

Client service mindset

Education

JD from an accredited Law School

Tools

Lexis

Westlaw

Job description

Wilson Elser is seeking a Senior Cyber Incident Response Attorney for a fully remote role with national reach. The position emphasizes defending complex cybersecurity-related matters and incident response leadership.

Ideal candidates have 8+ years of legal experience, 5+ years in data privacy and incident response, and strong research and writing skills. Bar admission is required, with flexible regional office reporting possible.