# Legal Counsel, Cybersecurity & Data Protection

**Company**: PayPal
**Work arrangement**: hybrid
**Experience**: senior
**Job type**: full-time
**Category**: Legal
**Industry**: Finance

**Apply**: https://paypal.wd1.myworkdayjobs.com/en-US/jobs/job/London-County-London-England-United-Kingdom/Senior-Legal-Counsel---Cybersecurity---Data-Protection_R0137787?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply
**Canonical**: https://yubhub.co/jobs/job_0e3d3328-fb8

## Description

PayPal is seeking an experienced, highly-engaged, and collaborative cybersecurity lawyer to serve as Legal Counsel, Cybersecurity & Data Protection.

The successful candidate will provide clear, pragmatic, and solution-oriented legal advice to enable business strategy while managing legal risk. They will participate in complex problem resolution, providing expert legal advice on high-stakes issues and disputes, and ensure compliance with relevant laws and regulations.

Key responsibilities include:

- Providing specialized legal advice and support, particularly in high-demand areas such as incident response, data privacy, cybersecurity, and regulatory compliance

- Identifying issues and recommending best practices, leveraging industry knowledge and legal expertise to guide decision-making

- Ensuring compliance with relevant laws and regulations, implementing robust compliance programs and conducting regular audits

- Managing legal risks and safeguarding PayPal's legal interests, developing strategies to address emerging legal challenges

- Representing PayPal in litigation and other legal proceedings, collaborating with external counsel and managing case strategies

The ideal candidate has 8+ years of incident response, crisis management, data security, data protection, and cybersecurity governance experience and a strong grasp of online technologies. They must be skilled at translating legal concepts into practical advice and an active driver of solutions.

Preferred qualifications include:

- Demonstrated experience managing data security incidents from a legal perspective and operating within an enterprise incident response program

- Proven ability to manage concurrent multijurisdictional incidents involving cross-border notification obligations

- Experience managing regulatory reporting timelines and drafting notifications compliant with ICO, EU supervisory authority, FCA, and U.S. regulatory requirements

- Cybersecurity subject matter expertise with knowledge of cybersecurity and data protection regulations and frameworks (e.g., NIST Cybersecurity Framework, ISO 27001, GDPR, SOC 2, or CCPA)

PayPal offers a balanced hybrid work model, comprehensive benefits, and a commitment to diversity and inclusion.

## Skills

### Required
- cybersecurity
- data protection
- regulatory compliance
- incident response
- crisis management

### Nice to have
- NIST Cybersecurity Framework
- ISO 27001
- GDPR
- SOC 2
- CCPA
- fintech

---

Source: [Apply at paypal.wd1.myworkdayjobs.com](https://paypal.wd1.myworkdayjobs.com/en-US/jobs/job/London-County-London-England-United-Kingdom/Senior-Legal-Counsel---Cybersecurity---Data-Protection_R0137787?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply)