Apply on Employer Site

BroadStreet Partners · 3 weeks ago

Sr. Counsel - Privacy & Cybersecurity

United States

Full-time

Remote

Senior Level

5+ years exp

BroadStreet Partners is a top-15 insurance brokerage in North America focused on empowering businesses through a unique co-ownership model. The Privacy and Cybersecurity Counsel will serve as a trusted advisor, shaping and evolving the privacy and cybersecurity program while ensuring compliance with relevant laws and guiding the business on best practices.

Angel InvestmentConsultingFinanceFinancial ServicesSmall and Medium Businesses

Responsibilities

Advise on compliance with U.S. and Canadian privacy and data protection laws, including CCPA, CPRA, and applicable Canadian federal and provincial statutes, and translate regulatory changes into clear, actionable guidance

Develop, maintain, and enhance privacy and cybersecurity programs, including policies, notices, consent frameworks, and data governance practices, while identifying gaps and recommending practical, scalable improvements

Guide the business on cybersecurity legal obligations, regulatory expectations, and industry best practices, and collaborate with teams to integrate privacy and cybersecurity considerations into daily operations

Support cybersecurity incident preparedness, including incident response planning, tabletop exercises, and breach response protocols

Lead or support the legal response to data security incidents, coordinating with internal stakeholders, external counsel, forensic firms, insurers, and regulators as needed

Advise on U.S. and Canadian breach notification requirements and manage related legal communications

Review, draft, and negotiate data protection, cybersecurity, and general commercial agreements

Partner with the business, technology, and security teams to support the responsible use of artificial intelligence, helping identify opportunities where AI can enable the business while assessing and managing associated privacy, data protection, and cybersecurity risks

Help shape and evolve the company’s approach to artificial intelligence by supporting practical use cases and establishing guardrails that enable innovation while managing legal, privacy, and cybersecurity risk

Qualification

U.S. privacy lawsCanadian privacy lawsCybersecurity legal adviceContract draftingIncident responseData protection agreementsStakeholder managementProfessionalismCommunication skillsProblem-solvingCollaboration