Senior Legal Counsel, Cybersecurity

📋 Description

• Offer specialized legal counsel to our teams regarding the management of cybersecurity risks and adherence to global cybersecurity laws and regulations.

• Deliver legal advice on regulatory, third-party, and internal security audits, collaborating with teams to define and conduct regular security hygiene assessments, mitigation strategies, and remediation efforts.

• Assist in strengthening DocuSign’s data governance framework, which includes overseeing data governance operations and documentation, employee training on data governance and security responsibilities, fostering a culture of awareness and compliance across the organization, enforcing policies, monitoring data compliance programs, auditing, and assessing third-party risks.

• Work together with the global legal team to synchronize security and data practices throughout the company, ensuring a cohesive approach to data protection.

• Aid in the development and enhancement of incident detection and response protocols.

• Provide guidance and support during cybersecurity-related investigations and responses to data incidents, including breach notifications and mitigation strategies aimed at reducing impact and preserving trust.

• Stay informed about pertinent data security laws and regulations, industry best practices for data governance management, as well as technological advancements in data compliance and security, threat vectors, and evolving industry standards to offer solutions to complex challenges.

• Assist in preparing presentations for the board and executives, regulatory filings, and other legal disclosures to ensure the accuracy and completeness of cybersecurity representations.

• Contribute to global AI governance, supporting business teams in continuing their responsible innovation efforts.

⛳️ Requirements

• Juris Doctorate Degree or an equivalent international qualification.

• Active membership in at least one state bar.

• Over 8 years of experience as a practicing attorney in a law firm, government agency, or in-house legal team, with a significant portion of that time dedicated to cybersecurity and incident response.

• Knowledge of global privacy and cybersecurity laws and regulations, including U.S. state laws and international data protection frameworks, GLBA, SEC, NYDFS cybersecurity requirements, as well as the EU's GDPR, DORA, and AI Act.

🏝️ Benefits

• Paid Time Off: accrue time off, along with paid company holidays based on your region.

• Paid Parental Leave: take up to six months off with your child after birth, adoption, or foster care placement.

• Full Health Benefits Plans: options for health plans with 100% employer coverage and minimal employee contribution starting from day one of employment.

• Retirement Plans: choose from various retirement and pension programs with potential employer contributions.

• Learning and Development: opportunities for coaching, online courses, and education reimbursements.

• Compassionate Care Leave: paid time off available following the loss of a loved one and for other significant life events.