Global IT Cyber Security Legal Counsel

• Serve as the primary legal advisor to Global IT Information Security leadership on cybersecurity governance, regulatory compliance, enforcement matters, and enterprise risk management initiatives
• Lead development and enhancement of cybersecurity legal frameworks, policies, standards, governance processes, and internal controls supporting global operations
• Advise business and functional leaders on cybersecurity considerations related to strategic initiatives, technology transformation, and operational risk management
• Support cybersecurity incident preparedness and response, including regulatory inquiries, investigations, audits, enforcement actions, and litigation
• Conduct cybersecurity legal due diligence for mergers, acquisitions, divestitures, and other business development activities, including integration and separation planning
• Counsel stakeholders on third-party cybersecurity risk, supply chain resilience, and contractual risk mitigation strategies
• Partner with product security, privacy, compliance, communications, and business counsel teams on secure-by-design initiatives and enterprise cybersecurity programs
• Monitor global cybersecurity regulatory, enforcement, and litigation developments and provide actionable guidance
• Serve as a trusted legal advisor across a global healthcare technology organization
• Travel up to 25%, primarily to Medtronic facilities

• Juris Doctor (J.D.) from a nationally recognized US law school
• 8+ years of legal experience, including experience advising on cybersecurity, information technology, and privacy matters
• Licensed to practice law and in good standing under the Bar of at least one state in the US or in Washington DC
• Experience providing legal counsel on cybersecurity governance, compliance, regulatory, enforcement, and risk management matters
• Experience advising cross-functional business and technology stakeholders on complex legal and operational cybersecurity issues
• For Baccalaureate degrees earned outside of the United States, a degree that satisfies the requirements of 8 C.F.R. § 214.2(h)(4)(iii)(A) is required
• Experience drafting, reviewing, and negotiating cybersecurity, information security, and third-party risk contractual provisions
• Knowledge of global cybersecurity regulatory frameworks, investigations, audits, and enforcement trends
• Experience supporting cybersecurity aspects of mergers, acquisitions, divestitures, or other business development activities
• Ability to communicate complex cybersecurity and technology concepts effectively to executive leadership and non-technical stakeholders
• Experience partnering with enterprise risk management, insurance, privacy, compliance, or product security teams within a global organization
• Unrestricted U.S. work authorization at the time of hire and for the duration of employment; sponsorship is not offered below Principal level

Demonstrates expertise in cybersecurity governance, regulatory compliance, and risk management within a global healthcare technology context. Proven ability to provide legal counsel on complex cybersecurity issues and effectively communicate with executive leadership and cross-functional teams.

• Juris Doctor (J.D.)
• 8+ Years Legal Experience
• Cybersecurity Governance
• Regulatory Compliance
• Contractual Risk Mitigation

• Cybersecurity Legal Frameworks
• Legal Due Diligence
• Drafting Cybersecurity Contracts
• Advising on Information Technology
• Mergers and Acquisitions Support

• Effective Communication
• Stakeholder Counseling
• Cross-Functional Collaboration

• Licensed to Practice Law

• Cybersecurity
• Regulatory Compliance
• Enterprise Risk Management
• Global Operations
• Healthcare Technology