Assistant General Counsel or Senior Counsel - Privacy and Cybersecurity

impact.

This role reports to the VP, Head of Privacy and Data Law within The Hartford's Privacy and Data Law Group, which includes a team of privacy and AI attorneys supporting the enterprise. The unit works collaboratively with other stakeholder groups in the company to provide risk-based advice and solutions. This attorney will provide business-focused, practical legal advice related to privacy, data security, data breach response, and AI issues affecting The Hartford's businesses. This role is based in our Hartford, CT Home Office. Qualified candidates based elsewhere may also be considered.

Responsibilities:

• Counseling business partners on new business initiatives to ensure practices with regard to personal information of customers and employees comply with applicable privacy and data security laws and regulations.

• Leading data incident response relative to incidents including malware/ransomware, mis-mailing/mis-emailing, coding/system issues, and vendor incidents.

• Negotiating privacy and data security contractual provisions for business transactions, including vendor/ service provider and corporate customer contracts.

• Advising on Ad-Tech issues, including cookies/ behavioral advertising, in accordance with applicable laws and regulations.

• Developing and updating internal and external-facing cybersecurity and privacy policies/standards based on developments in applicable laws and industry standards.

• Monitoring and advocacy regarding legislative proposals and implementation of new laws and regulations.

• Advising on AI-related laws and regulations applicable to the company.

• Serving as a subject matter expert with respect to cybersecurity, data breach response, AI and privacy for purposes of enterprise-wide employee training and awareness.

• Seeking out opportunities to improve legal outcomes and internal/external processes based on legal or other trends and developments.

Qualifications:

• At least 5 years of experience in a law firm or in-house law department working on privacy and cybersecurity law issues (some in-house experience preferred) required. Insurance industry experience and AI law experience preferred.

• Proven experience:

  • Communicating effectively with clients and/or law department management on complex legal issues.
  • Resolving legal issues presented and identifying and suggesting resolution of broader business problems.
  • Working independently as well as part of a team to deliver results.

• Significant working knowledge of U.S. federal and state privacy and data security laws including: Data breach notification laws, CCPA, NY DFS Cyber Reg, GLBA, NAIC Insurance Data Security & Privacy Model Laws, HIPAA, TCPA.

• International privacy law experience including India, UK/GDPR and Canada preferred; CIPP Certification preferred.

• Strong analytical, critical thinking skills, judgment and decision-making skills. Strong verbal and excellent written communications skills.

• Juris Doctor (J.D.) required. CT Bar License or CT in-house certification required or must be subsequently obtained as required by Connecticut Bar rules.

• Candidates based outside of Hartford will need to be willing to travel to Hartford ~50% of the time initially; the travel commitment will lessen considerably.

Compensation

The listed annualized base pay range is primarily based on analysis of similar positions in the external market. Actual base pay could vary and may be above or below the listed range based on factors including but not limited to performance, proficiency and demonstration of competencies required for the role. The base pay is just one component of The Hartford's total compensation package for employees. Other rewards may include short-term or annual bonuses, long-term incentives, and on-the-spot recognition. The annualized base pay range for this role is:
154,000-265,800
The posted salary range reflects our ability to hire at different position titles and levels depending on background and experience.

Equal Opportunity Employer/Sex/Race/Color/Veterans/Disability/Sexual Orientation/Gender Identity or Expression/Religion/Age