Assistant General Counsel (Cybersecurity)

Location: Johnston, Rhode Island; Boston, Massachusetts; New York, New York, United States

Salary: $176,000–$227,000 per year, plus an opportunity to earn an annual discretionary bonus.

Company

hirify.global is a financial institution providing banking and financial services with legal, cybersecurity, technology, risk, compliance, privacy, and communications functions.

What you will do

• Provide strategic legal advice on cybersecurity, data security, incident response, technology risk, and related regulatory matters.
• Act as the primary legal advisor during cyber and data-security incidents, including materiality assessments, regulatory notifications, disclosures, regulatory engagement, and communications.
• Monitor cybersecurity laws, regulations, guidance, and supervisory expectations and advise on their impact on operations, technology, and risk management.
• Support crisis management, escalation, response coordination, governance, tabletop exercises, readiness assessments, and operational resilience activities.
• Draft and maintain cybersecurity policies, incident-response procedures, standards, governance documents, and playbooks.
• Advise the Red Team, Open Source Office, third-party and technology-risk functions, and business stakeholders; draft, review, and negotiate technology, cybersecurity, data-security, cloud, software, and commercial agreements.

Requirements

• Juris Doctor degree from an accredited law school.
• Active license to practice law and membership in good standing in at least one U.S. jurisdiction.
• At least six years of relevant legal experience, including significant experience in cybersecurity, data security, privacy, technology law, cyber incident response, or a related area.
• Experience advising on cyber incident response, including legal and regulatory materiality assessments, notification and disclosure obligations, regulatory engagement, and supervisory expectations.
• Strong knowledge of cybersecurity laws, regulations, regulatory guidance, and recognized cybersecurity and data-protection frameworks.
• Experience drafting and maintaining cybersecurity policies, incident-response procedures, standards, governance documents, or playbooks.
• Strong contract drafting and negotiation skills involving technology services, cybersecurity, data protection, software, cloud services, and third-party risk.
• Ability to assess complex legal and regulatory risks, provide practical business-focused advice, communicate complex legal and technical matters clearly to senior and executive leadership, and manage multiple priorities during time-sensitive matters.

Nice to have

• Experience advising a financial institution or other highly regulated organization.
• Familiarity with logging and monitoring, endpoint security, identity and access management, cloud environments, vulnerability management, threat detection, and security-testing platforms.
• Experience with cybersecurity regulatory examinations, supervisory inquiries, internal investigations, remediation programs, crisis management, and communications related to cybersecurity or data-security events.
• Experience advising on open-source software licensing, governance, development, and distribution.
• Experience working with cybersecurity testing teams, Red Teams, penetration testers, or similar technical functions.

Culture & Benefits

• Full-time schedule of 40 hours per week.
• Flexible work arrangements.
• Medical, dental, and vision coverage; retirement benefits; and maternity/paternity leave.
• Education reimbursement, wellness programs, and paid time off exceeding mandatory paid sick or paid time-away requirements in U.S. jurisdictions.
• Employment offers are conditioned on successfully passing a background check, which may include credit, motor vehicle record, public record, employment verification, and criminal background checks.