Associate General Counsel, Cyber & Privacy Legal
About The Position
The ideal candidate for this senior role within AIG’s Data, Digital, and Cyber Legal Group is a highly experienced cybersecurity attorney with significant expertise managing complex incident response, negotiating and drafting technology and cybersecurity‑related agreements, and advising on regulatory compliance across the financial‑services sector. This attorney will play a key leadership role in shaping enterprise‑wide cyber risk strategy, supporting global business initiatives, and ensuring compliance with evolving regulatory expectations. The candidate will deliver strategic, pragmatic legal guidance that both protects the organization and enables business innovation. This role requires a sophisticated understanding of cyber threats, regulatory frameworks, operational risk, and the unique challenges facing a global financial institution.
Requirements
- J.D. from an accredited U.S. law school and active license to practice law.
- 10+ years of legal experience, including significant experience supporting incident response and advising on cyber‑risk management for a complex, highly regulated organization.
- Deep knowledge of cybersecurity laws, regulations, and regulatory expectations applicable to financial services.
- Extensive experience drafting and negotiating technology and cybersecurity‑related contracts.
- Exceptional communication, problem‑solving, and crisis‑management skills; ability to advise senior leaders under pressure.
- Highly collaborative, adaptive, and business‑focused approach.
Nice To Haves
- CIPP‑US, CISSP, or other cybersecurity/privacy certification preferred, but not required.
Responsibilities
- Provide sophisticated counsel on U.S. and global cybersecurity regulations applicable to financial institutions.
- Serve as a primary point of legal contact for cybersecurity‑related inquiries from financial‑services regulators, including responding to exams, supervisory requests, and regulatory reporting obligations.
- Monitor global regulatory developments and proactively advise leadership on required compliance enhancements.
- Lead legal strategy for cybersecurity incidents, including directing complex, multi‑jurisdictional incident response, coordinating with internal stakeholders, regulators, third‑party forensic firms, and law enforcement as needed.
- Develop and refine enterprise incident response protocols, including tabletop exercises, crisis‑management structures, and regulatory notification workflows.
- Advise on legal risks related to ransomware, data breaches, network intrusions, vendor incidents, and emerging cybersecurity threats.
- Draft, negotiate, and advise on a wide range of vendor and client facing cybersecurity‑related agreements.
- Partner with procurement, security, technology, and business stakeholders to ensure contractual controls align with enterprise risk and regulatory expectations.
- Serve as a trusted advisor to the CISO organization, technology leadership, and operational risk teams on cybersecurity and data‑risk strategy.
- Promote a positive, collaborative culture within the GLCR department and act as a thought leader across the company and the broader cybersecurity legal community.
Benefits
- The position is eligible for a bonus in accordance with the terms of the applicable incentive plan.
- Comprehensive benefits package that extends beyond time spent at work to offer benefits focused on your health, wellbeing and financial security—as well as your professional development—to bring peace of mind to you and your family.
- Volunteer Time Off and Matching Grants Programs.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
Education Level
Ph.D. or professional degree
