# Data Privacy and Cybersecurity Attorney

**Company**: Workday
**Location**: Reston, VA
**Work arrangement**: hybrid
**Experience**: senior
**Job type**: full-time
**Salary**: $208,700 - $313,100 per year
**Category**: Legal
**Industry**: Technology

**Apply**: https://workday.wd5.myworkdayjobs.com/en-US/Workday/job/USAVAReston/Data-Privacy-and-Security-Counsel--US-Federal-_JR-0109221?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply
**Canonical**: https://yubhub.co/jobs/job_0375e746-c9b

## Description

We are seeking a seasoned data privacy and cybersecurity attorney to join our team at Workday Government. As a trusted advisor, you will lead counsel on data privacy and cybersecurity matters, advise business, product, and engineering teams on compliance obligations across the data lifecycle, and own the legal strategy for achieving and maintaining FedRAMP authorization.

Responsibilities include:

- Serve as lead counsel on data privacy and cybersecurity matters

- Own the legal strategy for achieving and maintaining FedRAMP authorization

- Advise on requirements associated with Department of Defense (DoD) Cloud Computing Security Requirements Guide (SRG) Impact Levels

- Draft, review, and negotiate contracts, data processing agreements, and government contract vehicles

- Monitor and interpret emerging legal and regulatory developments in privacy and cybersecurity law

- Lead incident response efforts for data breaches and security incidents

- Act as a trusted advisor to executive leadership on data governance, risk management, and the legal implications of new products, features, and government contracting opportunities

Requirements:

- J.D. Degree and active membership in at least one state bar

- 8+ years of experience as a practicing attorney, with a substantial focus on data privacy and cybersecurity law

- Demonstrated experience advising on or supporting FedRAMP authorization processes

- Direct experience with Department of Defense Impact Levels and the DoD Cloud Computing SRG

- Strong working knowledge of U.S. federal privacy and security frameworks, including FISMA, NIST 800-53, NIST 800-171, and CMMC

Nice to have:

- Experience advising cloud service providers or government contractors on compliance with federal acquisition regulations

- Familiarity with state, federal, and international privacy laws

- Experience leading or supporting data breach and security incident response

- Excellent contract drafting and negotiation skills

- Ability to communicate complex legal and technical concepts clearly to both technical and non-technical stakeholders

- Strong project management skills with the ability to manage multiple compliance workstreams simultaneously

In return, we offer a competitive salary range of $208,700 - $313,100 per year, depending on location, as well as a comprehensive benefits package.

## Skills

### Required
- data privacy
- cybersecurity
- FedRAMP
- DoD Cloud Computing SRG
- FISMA
- NIST 800-53
- NIST 800-171
- CMMC

### Nice to have
- cloud service providers
- government contractors
- federal acquisition regulations
- state and international privacy laws
- data breach response
- contract drafting and negotiation

---

Source: [Apply at workday.wd5.myworkdayjobs.com](https://workday.wd5.myworkdayjobs.com/en-US/Workday/job/USAVAReston/Data-Privacy-and-Security-Counsel--US-Federal-_JR-0109221?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply)