Legal Counsel — Cyber Security, Technology Safety & Physical Security

The Legal Counsel provides senior, practical, risk-based legal counsel at the intersection of cybersecurity, Artificial Intelligence, cloud compute and services, physical security, supply chain, and technology-oriented regulatory compliance.

Responsibilities:

• Review, draft, and negotiate cybersecurity, physical security compliance, supply chain, and resilience provisions in customer documents, including MSAs, DPAs, security addenda, order forms, and related schedules.
• Advise on security-control commitments, audit and assessment rights, incident-notification obligations, penetration testing, business continuity, data retention and deletion, subcontractors, cloud services, and allocation of liability.
• Translate technical controls and architecture into clear, supportable contractual language without overstating capabilities or creating unbounded obligations.
• Advise Product and Engineering on customer-driven requirements and translate recurring negotiations into scalable product, policy, and commercial positions.
• Support Sales and Customer Success with timely, commercially pragmatic guidance during strategic and high-value transactions.
• Provide legal support for security certifications, attestations, and assurance programs, such as ISO 27001, SOC 2, PCI DSS, or other frameworks relevant to the company.
• Manage DORA, NIS2, CRA frameworks, serving as principal point of contact with authorities in this respect.
• Monitor and interpret cybersecurity, operational resilience digital-services, and technology requirements applicable to the company’s products, services, customers, and geographic footprint.
• Assist in supporting physical security units.
• Participate in security and product governance forums and provide legal input to material risk decisions, secure development practices, control exceptions, product launches, vendor onboarding, and significant architecture or service changes.
• Support preparation and maintenance of cyber-incident response plans, notification matrices, decision logs, tabletop exercises, and external communication protocols.
• Develop playbooks, clause libraries, decision trees, intake forms, templates, and training that enable consistent handling of security-related legal work.

Requirements:

• Law degree and admission to practice, or equivalent professional legal qualification in a relevant jurisdiction.
• Typically 7+ years of relevant legal experience, including significant in-house responsibility for technology, cybersecurity, cloud services, product counseling, commercial contracts, or regulated products.
• Demonstrated progression into a senior counsel, legal director, or comparable leadership role with ownership of complex, business-critical matters.
• Demonstrated experience negotiating customer security and data-protection terms and advising Security, Product, Engineering, and executive stakeholders.
• Working knowledge of common security and assurance frameworks and the ability to understand technical concepts sufficiently to assess legal and contractual implications.

Benefits & Perks:

• Competitive compensation
• Career growth and learning opportunities
• Flexibility and ownership
• Collaborative and innovative culture
• Opportunity to work on impactful AI projects
• International environment and talented teams