Associate Director and Counsel, Cybersecurity

RTX•Clovis, CA

1d•Remote

About The Position

At Raytheon, the foundation of everything we do is rooted in our values and a higher calling – to help our nation and allies defend freedoms and deter aggression. We bring the strength of more than 100 years of experience and renowned engineering expertise to meet the needs of today’s mission and stay ahead of tomorrow’s threat. Our team solves tough, meaningful problems that create a safer, more secure world. Raytheon Global Ethics & Compliance (GEC) has an exciting opportunity for an Associate Director, Cybersecurity Counsel to provide legal advice and counsel to the Raytheon business. This role is part of the GEC Global Compliance Programs and reports to the Director & Assistant General Counsel for Privacy, Cyber & Human Rights. As Associate Director, Counsel, this lawyer will serve as a subject matter expert on cybersecurity and data protection law in the defense industry and provide guidance and support on compliance with company policies, internal directives, and applicable federal, state, and local laws, including the Federal Acquisition Regulation (FAR) and Defense Federal Acquisition Regulation Supplement (DFARS). Additionally, the Associate Director will serve as a subject matter expert on data and cybersecurity incident response, supporting RTX-level incident response teams.

Requirements

Typically requires a minimum of 10 years’ legal and/or compliance experience with a focus on Government contract law and cybersecurity requirements
Juris Doctor, admitted to practice law in the U.S. and holds active law license
Experience advising and counseling clients on cybersecurity law, regulations and government policies, including incident response, investigations, and compliance
Experience with US Government (FAR / DFAR Supplements and Government contract procurement processes), contracts drafting, review and negotiations
Experience with US Government and internationally recognized cybersecurity controls, including Controlled Unclassified Information (CUI), and/or Global Data Privacy Regulations

Nice To Haves

Experience with cyber and data incident response, including DFARS reporting obligations
Strong investigative, analytical, written and oral communication skills
Strong sense of ownership and accountability and ability to make decisions efficiently and quickly
Ability to work in a fast-paced, changing environment while organizing and managing multiple responsibilities and projects with competing priorities and deadlines
Effective team builder and team player that fosters collaborative relationships

Responsibilities

Provide day-to-day legal support to the Raytheon organization on all aspects of Cybersecurity law and data protection
Lead and manage data incident response investigations and reporting under legal privilege, ensuring compliance with applicable regulatory requirements
Collaborate with cybersecurity subject matter expert (SME) on NIST 800-171, and Cybersecurity Maturity Model Certification 2.0 (CMMC)
Review redlines including purchase orders and subcontract terms and conditions to ensure compliance with company policies, procedures, internal guidance, and legal requirements, including the FAR and DFARS
Assist with the development, implementation, and maintenance of policies, standard work, playbooks, guidance, templates, and other documentation related to cybersecurity compliance including interpretation of Controlled Unclassified Information (CUI) determination
Develop and deliver training on cybersecurity law related to defense industry for legal professionals within the organization, as well as assist with the development and delivery of general awareness training for employees, contractors, and third parties
Travel up to 10% of the time