Role Description
As Senior Counsel, Cybersecurity and Incident Management, you will lead Dropbox’s incident response program and be responsible for cybersecurity counseling. This fast-paced role includes complying with global data breach notification laws, complying with cybersecurity rules and regulations, engaging with regulators, and advising on a wide range of legal issues that impact all aspects of Dropbox’s business. You will also help coordinate a global program that promotes user trust and facilitates company-wide responses to customer- and employee-impacting events. If you are passionate about security, privacy, and incident response, and thrive in an environment of uncertainty, then this role is for you.
Responsibilities
-
Investigate and assess security and privacy incidents, analyze legal responsibilities, and drive legal and regulatory responses.
-
Lead, and provide legal support to, Dropbox’s incident response program, which deals with a wide range of business issues beyond security and privacy.
-
Coordinate a team of on-call business managers that provide 24/7 support to incidents, and manage one incident response attorney.
- Engage and coordinate with leaders and executives throughout the company to respond to business-impacting incidents.
-
Provide sophisticated advice to engineers working on security, threat intelligence, and abuse issues.
- Ensure compliance with global cybersecurity laws.
- Promote and foster a culture of trust within and outside of Dropbox.
Requirements
-
5+ years of post-JD legal experience, ideally with experience counseling privacy, security, breach notification, and incident response matters.
-
Strong understanding of, and experience with, domestic and global breach notification and cybersecurity laws, including GDPR, HIPAA, US state breach laws, and SEC cybersecurity disclosure rules.
- Familiarity with technology and the ability to interact with highly-technical engineers and security personnel.
- Willingness to support incident response outside of traditional business hours.
- Great people skills and ability to work well in a fast-paced team environment with a wide range of technical and non-technical teams.
- Excellent writing, communication, and organizational skills.
- JD, admitted to a US state bar, distinctive academic record.
Preferred Qualifications
- Basic knowledge of SQL or other query/programming languages is a plus.
- Previous experience at a tech company.
- Previous management experience.
Compensation
