Associate Director and Counsel, Cybersecurity

RTX•Dulles, VA

1d•$172,900 - $328,700•Hybrid

About The Position

Raytheon Global Ethics & Compliance (GEC) is seeking an Associate Director and Counsel, Cybersecurity, to provide legal advice and counsel to the Raytheon business. This role is part of GEC Global Compliance Programs and reports to the Director & Assistant General Counsel for Privacy, Cyber & Human Rights. The position serves as a subject matter expert on cybersecurity and data protection law in the defense industry, providing guidance on compliance with company policies, internal directives, and applicable federal, state, and local laws, including the Federal Acquisition Regulation (FAR) and Defense Federal Acquisition Regulation Supplement (DFARS). The role also supports RTX-level incident response teams as a subject matter expert on data and cybersecurity incident response. The position is hybrid, with regular work both onsite and offsite; the onsite ratio is determined with the leader. Travel may be up to 10% of the time. Possible work locations include Tewksbury, Massachusetts; Arlington and Dulles, Virginia; and Farmington, Connecticut. U.S. citizenship is required. A security clearance is not required.

Requirements

Typically, at least 10 years of legal and/or compliance experience focused on government contract law and cybersecurity requirements.
Juris Doctor degree, admission to practice law in the United States, and an active law license.
Experience advising and counseling clients on cybersecurity laws, regulations, and government policies, including incident response, investigations, and compliance.
Experience with U.S. government contracting, including FAR and DFARS supplements, government contract procurement processes, and contract drafting, review, and negotiations.
Experience with U.S. government and internationally recognized cybersecurity controls, including Controlled Unclassified Information (CUI), and/or global data privacy regulations.
U.S. citizenship is required.

Nice To Haves

Experience with cyber and data incident response, including DFARS reporting obligations.
Strong investigative, analytical, written, and oral communication skills.
Strong ownership and accountability, with the ability to make decisions efficiently and quickly.
Ability to work in a fast-paced, changing environment while managing multiple responsibilities and projects with competing priorities and deadlines.
Ability to build effective teams and foster collaborative relationships.

Responsibilities

Provide day-to-day legal support to Raytheon on all aspects of cybersecurity law and data protection.
Lead and manage data incident response investigations and reporting under legal privilege, ensuring compliance with applicable regulatory requirements.
Collaborate with cybersecurity subject matter experts on NIST 800-171 and Cybersecurity Maturity Model Certification 2.0 (CMMC).
Review redlines, including purchase orders and subcontract terms and conditions, for compliance with company policies, procedures, internal guidance, and legal requirements, including FAR and DFARS.
Support the CISO organization with cyber defense and collaborate on contract negotiations.
Assist in developing, implementing, and maintaining cybersecurity compliance policies, standard work, playbooks, guidance, templates, and other documentation, including interpretation of Controlled Unclassified Information (CUI) determinations.
Develop and deliver cybersecurity law training for legal professionals and assist in developing and delivering general awareness training for employees, contractors, and third parties.
Travel up to 10% of the time.