Privacy, Cybersecurity, and Records Management Governance and Litigation Attorney

We are working with a major automobile manufacturer seeking an experienced governance and litigation attorney for its Office of General Counsel to provide the company with legal and regulatory compliance operations advice as to cybersecurity; to manage the company's privacy incident response operations, working closely with the company's cybersecurity team; to handle privacy and cybersecurity claims and litigation made against the Company, as well as certain categories of subpoenas and law enforcement requests; and to operate as a primary subject matter expert within the company's Office of General Counsel regarding E- Discovery and records management by advising the company's E-Discovery Team, IT, and other relevant departments and persons within the business concerning records retention and governance, defensible disposition, and information risk from an e-discovery perspective. Expected salary will be $170,000 - $200,000, depending upon experience. Benefits information is available from the company.

RESPONSIBILITIES

A. Oversee legal advice to the company and provide day-to-day counsel on matters and projects related to cybersecurity and data risk (50%).

• Serve as the primary legal advisor to the company's Chief Information Security Officer and its lead lawyer supporting its Cybersecurity Team.
• Provide cybersecurity legal advice and compliance support regarding state, federal, and international laws (UNECE, cyber and data breach legislation, automated vehicle legislation, CISA regulations, state "right to repair" laws, etc.) and help the company's business units map legal frameworks to their cybersecurity standards and procedures.
• Advise the company regarding responses to international, federal, and state governmental inquiries and other external inquiries concerning the company's cybersecurity practices.
• Provide legal support for cybersecurity vendor and application risk management, as well as for the company's information security management system, its product development and product regulatory teams, and its Car Security Board, developing new processes and procedures as appropriate.
• Lead tabletop exercises in conjunction with the company's cybersecurity and business teams.
• Support cybersecurity and privacy audits and regulatory inquiries.
• Establish and advance enterprise-wide compliance with global cybersecurity regulatory requirements, developing new processes and procedures as appropriate.
• Provide legal support for cybersecurity contract term negotiation.
• Participate, on the company's behalf, in industry-wide cybersecurity legal working groups.
• Provide backup support to the company's legal privacy team, as needed, providing legal privacy and risk assessment advice.

B.
Oversee legal advice to the company and provide day-to-day counsel on matters and projects relating to incident response, data litigation, and e-discovery (40%)

• Lead the company's privacy and incident response team and advise the company on incident response, in general, working with its internal teams to learn the scope and details of exposures. Advise the company, as well, concerning incident disclosure obligations, working with outside counsel, vendors, law enforcement, and other company entities when necessary.
• Manage all privacy, cybersecurity, and related data litigation claims, litigation, and regulatory investigations, proactively managing litigation matters. Formulate litigation strategies and budgets and assist with the drafting and review of briefs, motions, and court pleadings; the coordination and preparation of witnesses; the management of discovery; and other litigation activities.
• Support the company's E-Discovery Team as a legal expert in the field.
• Provide strategic direction and day-to-day counsel, as follows, reviewing and commenting on legal topics relating to E-Discovery and records information management, including those arising under state, federal, and international rules of procedure, e-discovery law, records retention statutes, and cross-border e-discovery laws.
• Assist all Office of General Counsel case teams in the development of an e-discovery strategy consistent with the company's procedures, client goals, E-Discovery Best Practices, and case variables.
• Assist the company's E-Discovery Team and its IT Department with the building and maintenance of legally compliant preservation and collection processes, procedures, and operations.
• Support the company's non-US affiliates concerning US e-discovery issues, by participating in the company's Global Discovery Center activities, among other activities.
• Support the implementation of data preservation policies and procedures within the company's business environment.
• Review and provide recommendations regarding e-discovery legal risk involved with the implementation and configuration of technology.
• Support and advise the company concerning its records management program and projects and its defensible disposition projects.
• Serve as the primary managing attorney handling certain subpoenas, warrants, and law enforcement requests served on the company.

C. Conduct training and create and maintain processes (10%)

• Attend industry and legal seminars, workshops, etc., as appropriate, to keep current on issues, laws and regulations.
• Conduct training in relevant practice areas for business units.
• Design and implement relevant procedures and processes and maintain proper documentation with respect to all responsibilities and activities listed in this job description.

QUALIFICATIONS

General Characteristics

• Bachelor's Degree and Law Degree from top-tier academic institutions.
• Membership in good standing in the State Bar of Virginia or at least one other US state (with the ability to operate using a Virginia corporate counsel certificate)
• IAPP certifications (CIPP-US, CIPM, CIPT)
• Certified Information Systems Security Professional (CISSP) certification
• Sound professional judgment
• Strong communication skills
• Ability to analyze legal issues in business contexts with a solution oriented approach
• Ability to learn quickly and become conversant with a variety of legal issues
• Ability to foster partnerships between the company's legal department and its business divisions
• Excellent drafting and written/oral communications abilities
• Excellent client handling skills
• Excellent attention to detail and superior organizational skills
• Excellent negotiation skills
• Excellent gifts of persuasion
• Strong presentation skills
• Strong resource and people management skills

Legal Expertise

• Seven or more (7+) years of legal experience as an attorney and litigator at a recognized commercial law firm, corporate legal department, regulatory agency, or equivalent workplace, with a focus on cybersecurity, litigation, privacy law, and e-discovery and records risk management
• Experience managing attorneys and legal professionals to address cross-functional and multi-disciplinary legal and business issues
• Experience advocating and presenting material to senior executives
• Substantial experience providing cybersecurity legal advice to information security organizations and product development teams within a corporation or the government
• Substantial experience managing cybersecurity privacy incidents, including legal aspects
• Substantial experience managing litigation, claims, and regulatory inquiries and investigations
• Substantial experience and understanding of data privacy law (including GDPR, CCPA, FTC Section 5, TCPA, and data breach C notification practices)
• Substantial experience drafting and negotiating data licenses and data privacy and security contract provisions
• Substantial experience managing and advising clients concerning e-discovery topics relevant to litigation matters

Automotive Industry Experience

• Strong technical background in cybersecurity, data, and IT infrastructure concepts
• Experience supporting privacy and cybersecurity efforts through design and concepts review in products and services development
• Experience advising clients on privacy compliance and governance in adtech
• Experience with a global company addressing privacy laws of multiple jurisdictions
• Experience incorporating and implementing privacy laws within a privacy compliance program
• German Language Skills

OTHER DETAILS

• Salary: $170,000-$200,000 (depending upon experience)
• Hybrid work schedule (details available from the company)
• Possible travel
• Benefits (detail available from the company)

About the Company

The company is an Equal Opportunity Employer. It welcomes and encourages applicants from all backgrounds and does not discriminate on the basis of race, sex, age, disability, sexual orientation, national origin, religion, color, gender identity/expression, marital status, veteran status, or any other characteristic protected by applicable laws.

Applying

Candidates may apply to this position on LinkedIn, the Hire Counsel website, or by direct e-mail to We at Hire Counsel cannot promise that a particular candidate will get the job or an interview, but we can promise that we will review all submitted resumes.

About Hire Counsel

Hire Counsel is an agile legal talent company. We build connections between and among legal professionals and our clients, some of the nation's largest law firms and legal departments (and some of the smallest). By introducing good lawyers to our clients and assisting attorney candidacies, we serve the entire legal community. We provide permanent employment opportunities. We also provide individuals with options to work on contract (temporary) assignments as may be fitting, to aid their stability, even as we endeavor to help them find permanent homes. Hire Counsel holds all resumes in the strictest confidence.