Corporate Counsel - Cybersecurity and Privacy (US)

Blue Yonder Job Title:

Corporate Counsel – Cybersecurity and Privacy (US)

Other comparable titles

Data Protection Lawyer or Counsel; Privacy Lawyer or Counsel

Synonymous Job Title:

Corporate Counsel

Location

US - remote

Dallas preferred

Overview

Blue Yonder is seeking a highly motivated Corporate Counsel – Cybersecurity and Privacy who is passionate about technology and eager to contribute to a U.S.-based global SaaS growth company that is at the forefront of technology and innovation by serving as a subject matter expert on global cybersecurity laws and provide legal advice and support in related fields, including privacy. 

This pivotal role will be an integral part of our dynamic global Legal and Privacy Team, and will provide day-to-day legal support to the information security organization.

We are seeking an agile, inquisitive, and positive-minded individual with excellent communication skills, a keen attention to detail, and a proactive attitude towards continuous learning. The ideal candidate will thrive in a fast-paced environment and embrace change enthusiastically.

What you will do:

• Provide legal advice on all aspects of cybersecurity incident responses, including:
  • assisting with the development, implementation, and ongoing maintenance/improvement of Blue Yonder’s cybersecurity policies, playbooks, templates, and other documentation
  • development or refinement of incident response plans
  • advising on the legal aspects of incident response activities and assisting with investigations
  • supporting post-incident response activity such as root cause analysis and mitigation activities
  • advising on requirements for and assistance with drafting customer or public-facing communications/reporting, and be responsible for ensuring timely satisfaction of legal reporting obligations
• Monitor global cybersecurity and privacy laws and regulations and provide practical legal advice to internal stakeholders, including IT Security, Product, Marketing, Finance, IT, and Associate Success
• Support Blue Yonder’s Privacy by Design strategy for new products and solutions

• Contribute to the ongoing development of Blue Yonder’s Global Privacy Program, including updating and creating legal documents, policies, and contract templates to ensure compliance with existing and emerging legal requirements in respective countries, conducting gap assessments, and advising on appropriate controls, risk mitigation options and compliance strategies
• Conduct Privacy Impact Assessments (PIAs) and Data Protection Impact Assessments (DPIAs) on processing activities involving the collection, processing & disclosure of personal information
• Develop and deliver training on privacy and cybersecurity law
• Participate in customer, vendor and other third-party contract negotiations related to data security and privacy terms.
• Stay updated on emerging areas of laws such as Generative Artificial Intelligence/ Large Language Models and advise internal stakeholders on risks and compliance obligations related to data security and privacy
• Provide legal advice on the cybersecurity and privacy aspects of mergers and acquisitions, and assist with cybersecurity and privacy post-M&A integration activities
• Participate in Blue Yonder Risk Management forums and projects, and advise on risk identification and mitigation strategies related to data privacy and cyber security
• Provide legal advice and counsel on cybersecurity insurance matters
• Undertake other responsibilities and special projects in support of the Global Legal Team’s goals and initiatives.

What we are looking for:

• Juris Doctorate, admitted to practice law in the U.S. with an active law license

• Minimum 4 (four) years of relevant law firm and/or in house experience, focused on cybersecurity and privacy laws. preferably related to cloud computing services.
• Ability to exercise sound judgment in mission-critical projects, working independently and often in ambiguous situations.
• Ability to work cross-functionally with a variety of stakeholders.
• Ideally, the candidate will have experience assisting with: (i) data breach response and cybersecurity preparedness activities, (ii) compliance with existing and emerging cybersecurity and privacy law frameworks in the US and internationally; and/or iii) regulatory investigations relating to privacy and data security issues
• Ability to provide confident recommendations to business teams and leaders and translate complex legal requirements into layman’s terms.
• Strong analytical skills with a customer-centric and solutions-oriented approach while