Assistant General Counsel or Senior Counsel - Privacy and Cybersecurity

The Hartford•Hartford, CT

1d•Hybrid

About The Position

We are seeking an experienced senior privacy attorney to join a collaborative, forward-thinking legal team at The Hartford. This senior privacy attorney will be a strategic privacy advisor at the center of the company’s data, technology, and innovation initiatives—helping ensure privacy, trust, and responsible use of data. If you enjoy solving complex legal issues, partnering closely with business and technology leaders, and influencing how an organization responsibly uses data at scale, this role offers both challenge and impact. This role reports to the VP, Head of Privacy and Data Law within The Hartford’s Privacy and Data Law Group, which includes a team of privacy and AI attorneys supporting the enterprise. The unit works collaboratively with other stakeholder groups in the company to provide risk-based advice and solutions. This attorney will provide business-focused, practical legal advice related to privacy, data security, data breach response, and AI issues affecting The Hartford’s businesses. This role is based in our Hartford, CT Home Office. Qualified candidates based elsewhere may also be considered.

Requirements

At least 5 years of experience in a law firm or in-house law department working on privacy and cybersecurity law issues (some in-house experience preferred) required.
Proven experience: Communicating effectively with clients and/or law department management on complex legal issues.
Resolving legal issues presented and identifying and suggesting resolution of broader business problems.
Working independently as well as part of a team to deliver results.
Significant working knowledge of U.S. federal and state privacy and data security laws including: Data breach notification laws, CCPA, NY DFS Cyber Reg, GLBA, NAIC Insurance Data Security & Privacy Model Laws, HIPAA, TCPA.
Strong analytical, critical thinking skills, judgment and decision-making skills.
Strong verbal and excellent written communications skills.
Juris Doctor (J.D.) required.
CT Bar License or CT in-house certification required or must be subsequently obtained as required by Connecticut Bar rules.

Nice To Haves

Insurance industry experience and AI law experience preferred.
International privacy law experience including India, UK/GDPR and Canada preferred; CIPP Certification preferred.
Candidates based outside of Hartford will need to be willing to travel to Hartford ~50% of the time initially; the travel commitment will lessen considerably.

Responsibilities

Counseling business partners on new business initiatives to ensure practices with regard to personal information of customers and employees comply with applicable privacy and data security laws and regulations.
Leading data incident response relative to incidents including malware/ransomware, mis-mailing/mis-emailing, coding/system issues, and vendor incidents.
Negotiating privacy and data security contractual provisions for business transactions, including vendor/ service provider and corporate customer contracts.
Advising on Ad-Tech issues, including cookies/ behavioral advertising, in accordance with applicable laws and regulations.
Developing and updating internal and external-facing cybersecurity and privacy policies/standards based on developments in applicable laws and industry standards.
Monitoring and advocacy regarding legislative proposals and implementation of new laws and regulations.
Advising on AI-related laws and regulations applicable to the company.
Serving as a subject matter expert with respect to cybersecurity, data breach response, AI and privacy for purposes of enterprise-wide employee training and awareness.
Seeking out opportunities to improve legal outcomes and internal/external processes based on legal or other trends and developments.