Senior Director, Law, Privacy and Cyber
JOB SUMMARY
The Sr Dir, Law-Privacy and Cyber will focus on both privacy law and cybersecurity law. Provides strategic legal counsel to business partners on the full range of data privacy, cybersecurity, and telecommunications privacy matters. Ensures the organization maintains appropriate privacy, information security, and telecommunications compliance policies, and other practices and processes cross-functionally. Support the company's privacy and cybersecurity governance framework.
MAJOR DUTIES AND RESPONSIBILITIES
- Provide legal counsel to the company on incident response actions, internal investigations, emerging risks, and compliance with mandatory cyber incident reporting obligations
- Provide legal support for the company's data strategy efforts as well as analytics and AI/machine learning initiatives, to ensure compliance with applicable privacy and telecommunications laws
- Counsel business teams on consumer consent frameworks, permissible data practices, and the legal implications of new data products or services that involve consumer personal information
- Advise on consumer and employee privacy rights, data subject requests, cross-border data transfers, privacy-by-design principles, and telecommunications subscriber privacy protections under federal and state law
- Ensure the organization maintains appropriate privacy, information security, and telecommunications compliance policies (i.e. privacy impact assessments, data processing agreements, records of processing activities, CPNI safeguarding procedures, and Cable Act subscriber notice and consent protocols)
- Work with senior in-house attorneys to proactively identify and address key legal issues for management to ensure that appropriate risk management strategies are in place
- Assist with drafting and participating in the company's privacy impact assessments and cybersecurity risk assessments
- Partner with other legal functions to develop approved data privacy and cybersecurity-related contract clauses and track any deviations from these established provisions
- Translate complex technical and legal privacy and cybersecurity concepts into clear, actionable guidance for non-technical stakeholders
- Engage law enforcement and information sharing organizations
- Monitor the evolving privacy, cybersecurity, and telecommunications regulatory landscape at the federal, state, and international levels
- Partner effectively and coordinate across the business to identify creative solutions and compliance practices for information, products, and internal operations
- Perform other duties and projects as required
REQUIRED QUALIFICATIONS
Required Skills/Abilities and Knowledge
- Active license to practice law in at least one of the fifty states
- Legally authorized to be employed in the United States
- Expertise in privacy law — including telecommunications-specific (CPNI and the Cable Act)
- Expertise in cybersecurity law
- Knowledge of the Electronic Communications Privacy Act
- Knowledge of the critical infrastructure provisions of the Homeland Security Act
- Knowledge of the Cybersecurity Information Sharing Act
- Knowledge of the Cyber Incident Reporting for Critical Infrastructure Act
- Knowledge of the Federal Trade Commission Act, data breach notification laws, and applicable sector-specific state and federal laws
- Knowledge state comprehensive privacy laws
- Knowledge of the SEC's cybersecurity disclosure rules
- Knowledge of international frameworks (EU General Data Protection Regulation, ePrivacy Directive, and the NIS2 Directive)
- Knowledge of emerging privacy and cybersecurity legal issues
- Ability to provide guidance to technical security, data governance, and data strategy teams
Required Education
- Bachelor's and Juris Doctor degrees from accredited institutions
Required Related Work Experience and Number of Years
- 5+ years of experience as a practicing attorney, with meaningful exposure to both data privacy and cybersecurity
PREFERRED QUALIFICATIONS
Preferred Skills/Abilities and Knowledge
- Familiarity with cybersecurity frameworks and standards
Preferred Education
- Certifications such as CIPP/US, CIPP/E, CIPM, or CISSP
- Preferred Related Work Experience and Number of Years
- 7+ years of combined law firm and in-house experience (focus on data privacy, cybersecurity, and telecommunications law)
WORKING CONDITIONS
- Office environment
- Occasional travel may be required
Here, employees don’t just have jobs, they build careers. That’s why we believe in offering a comprehensive pay and benefits package that rewards employees for their contributions to our success, supports all aspects of their well-being, and delivers real value at every stage of life.
A qualified applicant’s criminal history, if any, will be considered in a manner consistent with applicable laws, including local ordinances.
Get to Know Us Charter Communications provides superior communication and entertainment products for residential and business customers through the Spectrum brand. Our offerings include Spectrum Internet®, TV, Mobile and Voice. Beyond our connectivity solutions, we also provide local news, programming and regional sports via Spectrum Networks and multiscreen advertising solutions via Spectrum Reach. When you join our team, you’ll be keeping our customers connected to what matters most in 41 states across the U.S. Watch this video to learn more.
Who You Are Matters Here We’re committed to growing a workforce that reflects our communities, and providing equal opportunities for employment and advancement. EOE, including disability/vets. Learn about our inclusive culture.
Who You Are Matters Here
We're committed to growing a workforce that reflects our communities, and providing equal opportunities for employment and advancement. Learn about our inclusive culture.