Apply on Employer Site

Allstate · 1 month ago

Senior Counsel, Cybersecurity and Incident Response (Remote)

United States

Full-time

Remote

Senior Level

$112K/yr - $197K/yr

7+ years exp

Allstate is a leading insurance company dedicated to protecting families and their belongings. The Senior Counsel, Cybersecurity and Incident Response will provide critical legal advice related to cybersecurity and incident response, ensuring compliance with laws and regulations while safeguarding the organization's digital integrity.

BankingFinanceFinancial ServicesInsuranceInsurTechVenture Capital

No H1B

Responsibilities

Lead investigations and effectively collaborate with stakeholders in Law & Regulation, risk, security, technology, and more, ensuring an effective incident response across jurisdictions in compliance with applicable privacy, information security and cybersecurity laws and regulations

Maintain knowledge of US (state and federal) privacy, information security and cybersecurity laws and regulations, especially those applicable to insurance companies

Support cybersecurity, resiliency, and fraud legal counseling for the enterprise as needed

Proactively monitor and assess applicability of privacy, information security and cybersecurity laws and regulations, and other legal authority

Conduct risk analyses on key issues, from a holistic perspective, recognizing overall impact to the enterprise; make strategic recommendations based on legal requirements and risk analyses

Advise business partners on legal subjects (including cybersecurity, incident response, fraud and resiliency) and risk management

Leverages subject matter expertise to provide guidance and advice to team members based on scope of work

Drive strategy determination, action planning, and communication with business partners, business units, and other areas of Law & Regulation

Anticipate legal concerns and provide creative problem solving in a dynamic business environment

Escalate matters, as appropriate, to support legal and compliance risk identification and mitigation and company requirements

Exceptional ability to communicate verbally and in writing with a variety of audiences about complex technologies and legal requirements

Ability to work in a remote work office environment; with minimal travel requirements, based on business needs

Qualification

CybersecurityIncident ResponseData PrivacyData Breach InvestigationInformation SecurityRisk AnalysisFraud PreventionStakeholder CommunicationsStrategy PlanTime Management

Required

Juris Doctorate and active bar membership in good standing in state of practice

A minimum of 7 years of legal experience