Corporate Counsel – Cybersecurity & Privacy ‎(CYBATTNM)‎

At Kia, we’re creating award-winning products and redefining what value means in the automotive industry. It takes a special group of individuals to do what we do, and we do it together. Our culture is fast-paced, collaborative, and innovative. Our people thrive on thinking differently and challenging the status quo. We are creating something special here, a culture of learning and opportunity, where you can help Kia achieve big things and most importantly, feel passionate and connected to your work every day.

Kia provides team members with competitive benefits including premium paid medical, dental and vision coverage for you and your dependents, 401(k) plan matching of 100% up to 6% of the salary deferral, and paid time off. Kia also offers company lease and purchase programs, company-wide holiday shutdown, paid volunteer hours, and premium lifestyle amenities at our corporate campus in Irvine, California.

Status

Exempt

Summary

The primary function of this position is to operationalize data privacy policies and processes across Kia America (KUS) and mitigate risks associated with data privacy and cyber technologies. Develops, advises about, monitors and maintains information systems (IS) and cyber security policies, procedures and systems, including access management for hardware, firmware and software. Ensures that IS and cyber security architecture/designs, plans, controls, processes, standards, policies and procedures are aligned with IS standards and overall IS and cyber security. Identifies security risks and exposures, determines the causes of security violations and suggests procedures to halt future incidents and improve security. Develops techniques and procedures for conducting IS and cyber security risk assessments and compliance audits, the evaluation and testing of hardware, firmware and software for possible impact on system security, and the investigation and resolution of security incidents. Implements IS and cyber security policies and takes measures to mitigate risks associated with intrusion, frauds, attacks or leaks.

Flexible/Hybrid Work Policy: This position is required to work in the office four days each week, and may work remotely up to one day per week.

Major Responsibilities

1st Priority - 30%

Provides Company with legal advice and legal services relating to cybersecurity and privacy obligations with the goal of mitigating risks associated with a cybersecurity breach or breach of company privacy commitments.

2nd Priority - 30%

Responsible for providing legal counsel and advice, and drafting documents relating to privacy issues and privacy policies as they relate to sales, marketing and other areas of the Company, which includes data and cybersecurity issues.

3rd Priority - 20%

Respond directly to or assist business units with responding to requests from Auto-ISAC or regulators relating to the Company’s management of consumer data, cyber risks or cyber intrusions.

4th Priority - 10%

In coordination with Director and Managing Corporate Counsel, assist in the Legal Department’s workload, including but not limited to providing in-house legal services relating to litigation, transactional matters, regulatory matters, and Legal Department Assistance Requests.

Education/Certification

• Juris Doctor (J.D.) Degree from an ABA-accredited law school in the U.S.
• California Bar admission required.  (For out-of-state attorney, California State Bar admission within first year of employment.)

Overall Experience

• 4-8 years top tier law firm and/or in-house experience 
• Technical background and training helpful

Directly Related Experience

• Three or more years’ experience managing matters focused on data privacy and cybersecurity. 

Skills

Must possess general knowledge of laws and regulations pertaining to human resources.Intermediate knowledge of laws and regulations that govern benefits administration (e.g. FLMA, CFRA, ADA, §125, DOL, IRS guidelines and requirements, and workers’ compensation.)Given the confidential nature of Legal Department work, discretion and the ability to maintain strict confidentiality is required.Strong organizational skills with the ability to manage and prioritize projects assigned by General Council.Competency in sourcing regulatory legislationStrong background working with various leaves of absences and work accommodations.Strong knowledge of benefit laws and regulations (FMLA, CFRA/ADA, Cafeteria 125 programs, DOL, IRS guidelines and requirements).Ability to work on case research, document preparation, reporting and closing cases.Ability to read, analyze and interpret benefits and financial reports and other legal documents.

Competencies