Senior Counsel-Privacy, Data Protection & Cybersecurity

The Senior Legal Counsel role provides strategic legal guidance to Net Jets and affiliated companies, with a primary focus on cybersecurity, data privacy, data protection, and related regulatory compliance. This position acts as a lead advisor for legal issues tied to personal and business information handling and for cybersecurity risk management and incident response.

• Serve as the primary legal advisor and subject matter expert on cybersecurity, data privacy, and data protection across the organization.
• Provide guidance on applicable federal, state, and international privacy and data protection laws and regulations, including GDPR and CCPA/CPRA
  , along with other evolving privacy frameworks.
• Advise on cybersecurity governance, risk management, regulatory compliance, and the development and implementation of information security policies and procedures.
• Partner with Cybersecurity, Information Technology, and business leadership on the legal aspects of cybersecurity incidents, including incident response, investigations, breach notification obligations, and regulatory reporting requirements.
• Lead legal analysis and coordination for data breaches and other information security incidents in collaboration with internal stakeholders and external counsel as appropriate.
• Review, draft, and negotiate data privacy, data protection, cybersecurity, and information security provisions in commercial agreements, including data processing agreements, vendor contracts, and technology agreements.
• Advise on third-party data protection risks, vendor security requirements, cross-border data transfers, and contractual obligations involving sensitive information.
• Provide legal guidance on privacy-by-design principles, data governance, data retention, and emerging technologies, including artificial intelligence and related data-use considerations.
• Monitor developments in cybersecurity and privacy legislation, regulations, enforcement actions, and industry standards, including their potential impact on the organization.
• Support the development and enhancement of enterprise privacy and data protection policies, procedures, training, and compliance initiatives.
• Collaborate with internal stakeholders to assess and mitigate legal risks associated with new technologies, products, services, and business initiatives.
• Manage outside counsel and other external legal resources as necessary.
• Provide practical, business-oriented legal advice to senior leadership and cross-functional stakeholders.
• Support other corporate legal matters and special projects as assigned.

• Minimum 7 years of relevant legal experience, preferably combining law firm and in-house corporate experience.
• Substantial experience advising on cybersecurity, data privacy, data protection
  , and related regulatory compliance matters.
• Demonstrated knowledge of U.S. privacy and data protection laws, including state comprehensive privacy laws and data breach notification requirements, along with applicable federal regulations.
• Experience advising on cybersecurity incidents, regulatory obligations, and incident response processes.
• Experience drafting and negotiating technology agreements, data processing agreements, and contractual provisions relating to information security and data protection.
• Strong analytical, communication, negotiation, and problem-solving skills.
• Ability to provide practical legal guidance in a complex, fast-paced business environment.

• Experience advising multinational organizations on international privacy requirements, including GDPR and cross-border data transfers.
• Experience working directly with cybersecurity, information security, and technology leadership.
• Familiarity with…