Apply on Employer Site

Cboe Global Markets · 1 day ago

Sr. Counsel – Cybersecurity & Data Privacy

Chicago, IL

Full-time

Hybrid

Senior Level

$157K/yr - $194K/yr

5+ years exp

Cboe Global Markets is a leading provider of market infrastructure and tradable products, dedicated to solving complex challenges. They are seeking a Senior Counsel to provide legal support on cybersecurity, data protection, and privacy, ensuring compliance with legal and regulatory obligations.

BankingFinanceFinancial ServicesFinTechInsuranceStock Exchanges

Growth Opportunities

No H1B

Responsibilities

Work collaboratively across the organization to provide legal support for the cybersecurity, data protection, and artificial intelligence programs (including legal support for regulatory and audit functions, as needed), and establish appropriate relationships with responsible members of relevant departments, such as Risk, Information Security, Marketing and Communications (MarComms) and Compliance, to ensure coordinated and appropriate responses to incidents, issues, and opportunities related to cybersecurity, data protection, and artificial intelligence

Consult with senior leadership and Cboe’s Boards of Directors and responsible Committees regarding cybersecurity preparedness and strategy

Lead or support legal involvement in incident response for a broad range of circumstances including fraud, insider risk, data breach, availability attacks and other computer security events, etc. Align and manage processes to preserve privilege

Assist with management of outside counsel and other relevant professionals and collaborate with them and Cboe management and associates regarding various cyber and data protection efforts, including compliance with current and emerging legal and regulatory requirements and best practices; risk assessment and management; conducting tabletop exercises with management, Boards and Committees, and other internal departments; preparation for and management of incident response; and compliance with regulatory reporting requirements

Collaborate with Cboe’s Risk group, including Cboe’s Chief Information Security Officer, on threat investigations and programs, including participation in Cboe’s enterprise risk management program and insider threat group

Maintain fluency with domestic and international cybersecurity, privacy and data protection laws and regulations impacting Cboe as a financial institution. As needed, provide business and risk partners strategic legal counsel that not only meets current requirements, but anticipates changes (to law and/or technology) to better maintain business flexibility and efficiency

Provide legal support to Cboe’s incident response program, including with respect to investigating potential incidents, identifying applicable legal obligations, and managing the company’s notification of and response communications to confirmed data security incidents working in collaboration with Cboe’s Risk, Information Security and MarComms departments

Provide counsel on company responses to regulatory inquiries and litigation concerning technology, cybersecurity, and data privacy matters

Provide counsel on the intellectual property efforts of Cboe, including patent, copyright, and trademark matters

Provide legal support in respect of other areas of emerging risk, such as sanctions and trade controls, anti-money laundering rules and regulations, compliance with the Foreign Corrupt Practices Act, and other similar areas requiring coordinated and company-wide compliance programs

Assist with various legal projects across the Legal Division and perform other duties as assigned

Qualification

Cybersecurity lawData protection lawIncident responseIntellectual property lawRegulatory complianceProject managementAnalytical skillsBar association membershipMicrosoft Office SuiteCommunication skillsTeam collaborationTime management

Required

Minimum of 5 years of experience as a practicing attorney, including a minimum of 3 years with a focus on cybersecurity, data protection, privacy and/or other technology and compliance-related risks

Ability to effectively communicate both orally and in writing and to effectively interact with internal and external contacts

A working knowledge of incident response frameworks and handling procedures, US privacy and cybersecurity laws

Ability to create and execute detailed project plans and effectively collaborate with stakeholders

Strong attention to detail and the ability to articulate complex concepts with the level of detail that is necessary for various regulatory and other written communications

Ability to work both independently and cooperatively in group situations; offer assistance and support to co-workers; balance team and individual responsibilities; exhibit objectivity and openness to others' views; give and welcome feedback

Proven analytical and problem-solving skills

Ability to organize and prioritize work assignments; strong time management experience and skills; and ability to complete multiple tasks simultaneously with accuracy and quality, to adjust to changes in priorities and situations, and to meet deadlines

Member in good standing of at least one state bar association

Bachelor's Degree and Juris Doctorate

Licensed to practice law

Computer proficiency in Microsoft Office Suite applications including Word, PowerPoint, Excel, and Outlook, as well as document management and other office technologies

Preferred

Experience with intellectual property, particularly patents, and previous employment with highly regulated institutions, including financial institutions, are desirable

Knowledge of intellectual property law related to patents, copyrights, trademarks, and trade secrets is a plus

Prior employment in financial services, experience with regulatory investigations and/or government enforcement actions, familiarity with international privacy and data protection laws, and one or more of the following certifications is a plus: Certified Information Security Manager (CISM), Certified Information Systems Security Professional (CISSP), Certified Information Privacy Professional (CIPP), or other relevant certifications offered by the International Association of Privacy Professionals