Senior Cybersecurity Counsel

Citizens; Johnston (RI); On-site; USD 176,000 - 227,000; Full time

Job summary

Citizens is seeking an experienced Cybersecurity Attorney to join the Legal Cyber and Privacy team. The role provides strategic legal counsel on cybersecurity, data security, incident response, technology risk, and related regulatory matters to ensure regulatory compliance and operational resilience.

The ideal candidate brings substantial cybersecurity and technology law experience, strong judgment, and the ability to provide clear guidance to senior leaders during time-sensitive incidents.

Qualifications

• Juris Doctor degree from an accredited law school.
• Active license to practice law and membership in good standing in at least one U.S. jurisdiction.
• At least six years of relevant legal experience, including significant cybersecurity, data security, privacy, technology law, or cyber incident response experience.
• Experience advising on cyber incident response, including regulatory materiality assessments, notifications, disclosures, and regulatory engagement.

Responsibilities

• Provide strategic legal counsel on cybersecurity, data security, incident response, technology risk, and related regulatory matters.
• Advise on incident escalation, regulatory notifications, and disclosure obligations.
• Monitor evolving cybersecurity laws, regulations, and supervisory expectations, and advise stakeholders on impact to operations and risk practices.
• Support crisis-management activities and communications during significant events.
• Draft, review, and maintain cybersecurity and incident-response policies, standards, and playbooks.
• Provide guidance for testing activities including red-team and penetration testing related to cybersecurity.

Skills

Legal advisory

Cybersecurity knowledge

Regulatory compliance

Communication skills

Education

Juris Doctor degree

Job description

Citizens is seeking an experienced Cybersecurity Attorney to join the Legal Cyber and Privacy team. The role provides strategic legal counsel on cybersecurity, data security, incident response, technology risk, and related regulatory matters to ensure regulatory compliance and operational resilience.

The ideal candidate brings substantial cybersecurity and technology law experience, strong judgment, and the ability to provide clear guidance to senior leaders during time-sensitive incidents.