Senior Legal Counsel - Cybersecurity & Data Privacy

Larson Maddox; Columbus (OH); On-site; USD 150,000 - 230,000; Full time

Job summary

Larson Maddox’s client, a leading Aviation company, seeks a Senior Counsel to lead cybersecurity, data privacy, and regulatory compliance. The role partners with c-suite, IT, cyber teams, HR, and the broader legal group on strategic objectives.

The ideal candidate has incident response experience and familiarity with GDPR, CCPA/CPRA, ISO 27001, and certifications such as CIPP/US, CIPP/E, or CIPM, with a growth path into senior leadership.

Qualifications

• 8+ years of experience in legal roles with cybersecurity and data privacy focus.
• Experience advising on regulations in a highly regulated industry.
• Ability to translate complex regulatory information into actionable guidance for internal stakeholders.

Responsibilities

• Act as the organization’s chief legal resource for information security, privacy compliance, and data governance.
• Counsel stakeholders on GDPR, CCPA/CPRA, and other data protection regulations.
• Prepare and negotiate privacy, cybersecurity, and data processing agreements; manage privacy incidents.

Skills

Cybersecurity & Data Privacy

Regulated Industry Experience

Legal Advisory & Strategy

In-house & Law Firm Experience

Communication & Judgment

Job description

Our client, a leading Aviation company is seeking a Senior Counsel, Cybersecurity & Data Privacy to their legal team. This individual's will primarily responsible for cybersecurity, data privacy, data protection, and regulatory compliance and partner closely with c-suite, information technology, cybersecurity, information security, compliance, HR, and other members on the legal team on strategic objectives. The right candidate will be excited by growth, as there is a set growth path up into senior leadership.

The ideal candidate will have direct expertise in cybersecurity incident experience, experience advising on international privacy requirements(including GDPR and cross-border data transfers), familiarity with NIST, ISO 27001, certifications such as CIPP/US, CIPP/E, or CIPM.

Job title: Senior Counsel, Cybersecurity and Data Privacy

Reports to: General Counsel

Location: Columbus, Ohio

Work Mode: Fully on-site, 5-days per week in-office.

Job Description:

• Act as the organization's chief legal resource for matters involving information security, privacy compliance, and data governance.
• Counsel internal stakeholders on domestic and global privacy requirements, including GDPR, CCPA/CPRA, and other applicable data protection regulations.
• Provide legal support relating to cyber governance programs, security risk assessments, compliance obligations, and enterprise security controls.
• Work closely with technology and cybersecurity teams during security events, advising on investigations, response efforts, notification requirements, and interactions with regulators.
• Direct legal review and management of privacy incidents and cybersecurity breaches, coordinating with business partners and outside advisors when necessary.
• Prepare, review, and negotiate contractual terms addressing privacy, cybersecurity, information security, and data handling, including vendor, technology, and data processing agreements.
• Advise business units regarding third-party information security risks, international data transfers, vendor oversight requirements, and obligations involving confidential or regulated data.
• Counsel stakeholders on privacy-by-design concepts, records management, data lifecycle considerations, governance frameworks, and emerging technologies such as artificial intelligence.
• Track and evaluate legislative, regulatory, and industry developments related to privacy and cybersecurity to determine organizational impact and required actions.
• Assist in designing and strengthening company-wide privacy programs, policies, awareness initiatives, compliance processes, and employee training efforts.
• Partner with business and technology leaders to evaluate legal risks associated with new systems, services, products, and strategic initiatives.
• Oversee relationships with external legal advisors and other outside resources as required.
• Deliver practical and commercially focused legal recommendations to executives and cross-functional teams.
• Contribute to broader corporate legal initiatives and perform additional assignments as needed.

Qualifications:

• 8+ years of experience, including experience, ideally including both in-house and law firm experience.
• Expertise in cybersecurity and data privacy
• Experience in a highly regulated industry
• Excellent judgement, ability to handle sensitive information, balance legal and business day-to-day activities, and independently manage complex legal matters.
• Ability to translate complex legal and regulatory information into actionable guidance for internal stakeholders