Cyber Security and Privacy Counsel Manager. Stamford Move Collective

Join Philip Morris International

Be a part of a revolutionary change! At Philip Morris International (PMI), we are committed to transforming our business to deliver a smoke-free future. With change comes great opportunity, and we invite you to be part of our innovative journey where your career can take you in diverse directions. Our success relies on individuals who share our commitment and passion for progress.

Our beautiful HQ in Stamford, CT is just steps away from the Stamford Metro-North Train Station and is easily accessible from NYC.

The Cyber Security and Privacy Counsel Manager will play a vital role as a legal advisor within PMI's Global Data Privacy & Cyber Legal team, specializing in cybersecurity and U.S. privacy laws. This role involves providing daily global and U.S.

-focused legal guidance on critical issues such as cybersecurity regulations, digital compliance requirements, incident response, and broader data protection matters. You will also work closely with the Global Senior Counsel - Data Privacy & Cyber to shape our global cyber and digital regulatory strategy.

Your responsibilities will include leading U.S. privacy counseling across PMI's operations, interpreting federal and state privacy laws like CCPA/CPRA and HIPAA, and navigating their interactions with GDPR and other global mandates. You'll manage essential U.S. privacy functions, including transparency requirements, vendor contract reviews, and support for data subject rights.

In this position, you will enhance PMI's capability to manage evolving U.S. privacy and cybersecurity regulatory complexities while ensuring alignment with our enterprise-wide digital and data protection goals.

• Provide legal guidance on cybersecurity and digital regulatory matters, focusing on U.S. requirements.
• Support the SOC, Cyber Defense, and Incident Response teams during potential security incidents, assisting in triage, investigation, remediation, notifications, and documentation.
• Contribute to the development of PMI's cybersecurity governance frameworks, including policies, playbooks, standards, and procedures.
• Draft and negotiate cybersecurity and data protection contractual provisions, including DPAs and vendor agreements.
• Stay informed on U.S. and global developments in cybersecurity, AI, and emerging technologies, translating legal requirements into actionable business guidance.
• Create and maintain cybersecurity and privacy policies, standards, and training materials.
• Assess legal and compliance risks arising from audits and new digital initiatives.
• Act as the primary U.S. privacy legal contact, advising on the operational impact of federal and state privacy laws.
• Facilitate U.S. privacy compliance activities, including DPIAs, consumer transparency initiatives, and governance.
• Ensure alignment of U.S. privacy and cybersecurity practices with PMI's global frameworks.
• Foster strong relationships with stakeholders, providing practical, risk-based legal guidance.
• Effectively communicate complex legal concepts to executives, business leaders, and technical teams.
• Demonstrate sound judgment and prioritize effectively, especially during fast-paced cybersecurity incidents.
• Drive the execution of legal and compliance initiatives through meticulous planning and analytical skills.
• Contribute to global cyber, privacy, and AI governance initiatives relevant to U.S. needs.
• Exhibit integrity and collaboration while influencing stakeholders and supporting a strong cyber and privacy governance culture.

• A licensed U.S. attorney with at least five years of experience in cybersecurity and privacy legal matters.
• Strong knowledge of U.S. privacy laws and cybersecurity frameworks.
• Familiarity with global privacy and cybersecurity regulations.
• Ability to manage competing priorities in a fast-paced environment.
• Excellent communication skills with a talent for drafting high-quality legal documents in English.
• Strategic thinker with the ability to translate technical concepts into clear legal guidance.
• Experience advising during cybersecurity incidents and readiness to respond urgently.
• A proven track record in negotiating…