Senior Privacy & Cybersecurity Counsel

Citizens Bank; Melville (NY); On-site; USD 176,000 - 230,000; Full time

Benefits offered by this job

Health benefits

Education reimbursement

Retirement benefits

Wellness programs

Job summary

Citizens Bank is seeking an Assistant General Counsel to enhance its privacy and cybersecurity program. You will advise senior leaders on data governance, regulatory compliance, and incident response, shaping enterprise-wide risk management and strategic initiatives.

You will work across IT, InfoSec, Compliance, Risk, and Product teams to ensure lawful operations, draft complex vendor and data processing agreements, and lead matters related to data protection and privacy strategy.

Qualifications

• J.D. and active bar membership in good standing.
• 5+ years of legal experience focusing on privacy, cybersecurity, and technology law.
• Deep knowledge of US and international privacy laws and cybersecurity frameworks.

Responsibilities

• Provide strategic legal counsel on privacy, cybersecurity, and data governance matters.
• Interpret and apply GLBA, CCPA/CPRA, GDPR, DPDA and other privacy regulations.
• Draft, review, and negotiate data processing agreements and technology contracts.
• Identify legal risks and develop practical mitigations to support innovation.
• Collaborate with IT, InfoSec, Compliance, Risk, and Product teams for lawful alignment.
• Manage privacy and cybersecurity disputes, investigations, and enforcement actions.
• Develop and implement internal policies and training on data privacy and cybersecurity.

Skills

Privacy & data protection

Cybersecurity law

Regulatory compliance

Contract negotiations

Education

J.D. from accredited law school

Job description

Citizens Bank is seeking an Assistant General Counsel to enhance its privacy and cybersecurity program. You will advise senior leaders on data governance, regulatory compliance, and incident response, shaping enterprise-wide risk management and strategic initiatives.

You will work across IT, InfoSec, Compliance, Risk, and Product teams to ensure lawful operations, draft complex vendor and data processing agreements, and lead matters related to data protection and privacy strategy.