Senior Counsel, Cybersecurity and Incident Management

Role Description

As Senior Counsel, Cybersecurity and Incident Management, you will lead Dropbox’s incident response program and be responsible for cybersecurity counseling. This fast-paced role includes complying with global data breach notification laws, complying with cybersecurity rules and regulations, engaging with regulators, and advising on a wide range of legal issues that impact all aspects of Dropbox’s business. You will also help coordinate a global program that promotes user trust and facilitates company-wide responses to customer- and employee-impacting events. If you are passionate about security, privacy, and incident response, and thrive in an environment of uncertainty, then this role is for you.

Responsibilities

• Investigate and assess security and privacy incidents, analyze legal responsibilities, and drive legal and regulatory responses.

• Lead, and provide legal support to, Dropbox’s incident response program, which deals with a wide range of business issues beyond security and privacy.

• Coordinate a team of on-call business managers that provide 24/7 support to incidents, and manage one incident response attorney.

• Engage and coordinate with leaders and executives throughout the company to respond to business-impacting incidents.

• Provide sophisticated advice to engineers working on security, threat intelligence, and abuse issues.

• Ensure compliance with global cybersecurity laws.

• Promote and foster a culture of trust within and outside of Dropbox.

Requirements

• 5+ years of post-JD legal experience, ideally with experience counseling privacy, security, breach notification, and incident response matters.

• Strong understanding of, and experience with, domestic and global breach notification and cybersecurity laws, including GDPR, HIPAA, US state breach laws, and SEC cybersecurity disclosure rules.

• Familiarity with technology and the ability to interact with highly-technical engineers and security personnel.

• Willingness to support incident response outside of traditional business hours.

• Great people skills and ability to work well in a fast-paced team environment with a wide range of technical and non-technical teams.

• Excellent writing, communication, and organizational skills.

• JD, admitted to a US state bar, distinctive academic record.

Preferred Qualifications

• Basic knowledge of SQL or other query/programming languages is a plus.

• Previous experience at a tech company.

• Previous management experience.

Compensation