MCCA Career Center

This Counsel is a critical team member within United's Global Compliance and Ethics function. This position will have key and primary responsibility for supporting and working closely with United’s Chief Information Security Officer and Cybersecurity and Digital Risk team on all legal and regulatory aspects of data protection, information security and cybersecurity-related issues. This role will also support key internal business stakeholders on information security and cybersecurity functions; provide leadership and legal expertise on cybersecurity compliance issues; conduct risk assessments; provide counsel to business leaders and other members of the Legal Department; and identify and contribute to the resolution of cybersecurity related legal issues with a broad and complex range of risk exposure. This position will report to the Deputy General Counsel - Chief Compliance Officer and will work collaboratively with other members of Compliance and Ethics and Legal teams, as well as key business stakeholders and partners.

• This position will have legal responsibility for all aspects of information security and cybersecurity
• Analyze new and current laws and regulations and advise the business on information security and cybersecurity obligations and carry out information security and cybersecurity compliance operations
• Work closely with cross-functional teams, including senior management, and collaborate with Privacy counsel to provide information security and cybersecurity strategy and guidance to support operations and new initiatives
• Advise Cybersecurity and Digital Risk team on appropriate information security and cybersecurity controls to comply with global regulatory requirements and best practices and translate legal requirements into technical design requirements
• Draft, negotiate and advise the business on the information security and cybersecurity aspects of contracts and advise Cybersecurity and Digital Risk team in United’s vendor risk management program
• Advise Incident Response team in connection with potential incidents, including response, remediation and legal risks and requirements
• Advise Vulnerability Management team in connection with the resolution of vulnerabilities and information sharing
• Advise Cybersecurity and Digital Response team in connection with security audits and compliance matters
• Guide the continued improvement of United’s global cybersecurity program
• Coordinate with outside counsel as necessary with respect to information security and cybersecurity matters
• Conduct risk assessments and develop work plans to address identified risks
• Collaborate with Privacy counsel on data protection compliance initiatives
• Work with Privacy counsel to provide training to relevant employee groups
• Serve as subject matter expert in developing and enhancing data governance strategies
• Build and maintain relationships with private and public sector entities focused on information security and cybersecurity

Qualifications

Required 

• JD required; Membership in good standing in a state Bar
• 5+years information security and cybersecurity experience
• In-house, government or large firm private practices experience
• Extensive understanding and experience in evolving global cybersecurity programs and appropriately tailoring strategies and policies to fit business needs and risks
• Experience working with data protection authorities
• Experience working with law enforcement and national security authorities
• Experience leading data breach and incident response investigations
• Experience in developing working on policy issues related to information security and cybersecurity, investigations, threat sharing as it intersects with privacy and cybersecurity
• Cybersecurity technology knowledge, including ability to effectively communicate with cybersecurity professionals and ability to translate technical issues to legal risk in a clear and concise manner
• Substantial experience with cybersecurity standards, frameworks, risk assessments and certification processes, such as, NIST, ISO and other compliance frameworks
• Ability to create and maintain strong collaborative relationships with business partners
• Ability to provide effective guidance and assistances to the Deputy General Counsel - Chief Compliance Officer, Legal team and business stakeholders
• Effective business writing and presentation skills combined with strong interpersonal communication abilities that enable individuals to work effectively with a wide range of technical and practical aspects of business
• Excellent management and project management skills and business judgment with a capacity to make decisions and give practical business/legal/compliance advice
• Ability to provide leadership in developing and maintaining effective information security and cybersecurity policies and programs
• Attention to detail
• Working independently and meeting deadlines
• Excellent communication skills
• Must be legally authorized to work in the United States for any employer without sponsorship
• Successful completion of interview required to meet job qualification
• Reliable, punctual attendance is an essential function of the position