Director, Legal Affairs

City of New York•Brooklyn, NY

2d•Hybrid

About The Position

New York City Emergency Management (NYCEM) is seeking a skilled, forward-thinking attorney with expertise in privacy law, data protection, and information technology. The role provides strategic legal guidance at the intersection of law and technology, advising agency units and bureaus on initiatives, policies, and programs. The position is within the Legal Affairs Unit of the Office of the Chief Counsel, which advises NYCEM on legal and policy matters, supports agency transactions, and coordinates with the NYC Law Department, the Office of the Counsel to the Mayor and City Hall, and other local, state, and federal counsel. The Director reports directly to the Deputy Chief Counsel and exercises wide latitude for independent judgment and unreviewed action. The role supervises legal and administrative staff and may serve as acting supervisor during temporary absences. The selected candidate will join an on-call Emergency Operations Center (EOC) team. EOC assignments run for three weeks at a time, followed by six weeks off. During emergencies, the employee may be required to work outside regular business hours, including nights, weekends, holidays, and extended weeks. The employee will also participate in emergency-response training, drills, and exercises, and may volunteer for Ready NY preparedness presentations. The role is required to work in person at the office three days per week, except in extenuating circumstances. The position is supported by a federal Emergency Management Performance Grant through September 30, 2025, with the possibility of extension; the employee will be responsible for related training requirements. Candidates must be authorized to work in the United States without employer support. NYCEM does not participate in eVerify, which is required for reauthorization of some visas. Applicants must submit a separate cover letter in the application portal. The high end of the stated salary range is available to candidates who have been in City service for two or more years.

Requirements

Admission to the New York State Bar and continued membership in good standing for the duration of employment.
Four years of recent, full-time, responsible, relevant, satisfactory legal experience after admission to any bar.
Eighteen months of experience supervising other attorneys in an administrative, managerial, or executive capacity, or performing highly complex and significant legal work.
Authorization to work in the United States without employer support.
Ability to work in person at the office three days per week, with exceptions for extenuating circumstances.
Ability to work non-business hours during some emergencies, including nights, weekends, holidays, and extended weeks outside a 9 a.m.–5 p.m. schedule.
Ability to participate in emergency-response training, drills, and exercises.
Ability to meet training requirements associated with the federal Emergency Management Performance Grant.
Candidates must submit a separate cover letter in the application portal.

Nice To Haves

At least three years of experience in privacy, data protection, and IT law, including 12 months supervising other attorneys in an administrative, managerial, or executive capacity, or performing highly complex and significant legal work.
Strong understanding of cybersecurity frameworks and technology contracts.
Demonstrated leadership and a history of successfully supervising and managing attorneys and legal support staff.
Ability to develop policy and legal analyses that support emergency planning and initiatives.
Strong organizational, communication, interpersonal, writing, legal research, problem-solving, and analytical skills.
Strong knowledge and understanding of relevant city, state, and federal laws, rules, and regulations, and the ability to interpret and apply them.
Experience in emergency management and/or knowledge of New York State Executive Law and the NYC Charter and Administrative Code.
An informed perspective on applying a racial equity lens in policymaking.
Excellent judgment and ability to work independently with little supervision.
Ability to thrive in a fast-paced, deadline-driven environment.
Subject-matter expertise; a strong work ethic and productivity; strategic problem-solving and innovation; effective communication; and teamwork.
Managerial competencies including strategic planning, decision-making, relationship building, giving and receiving feedback, communication to the unit, coaching, and team management.

Responsibilities

Attend meetings, conferences, and workshops as needed.
Supervise legal and administrative staff to ensure quality, completeness, and compliance with agency policies and standards.
Provide timely, accurate legal advice on compliance, contracting, procurement, and related matters.
Advise on global, federal, and state privacy regulations, including GDPR, CCPA, and HIPAA.
Draft, review, and negotiate technology, SaaS, data-processing, and other complex IT agreements.
Collaborate with IT/MIS, security, and agency units to implement privacy-by-design practices.
Monitor emerging privacy laws, cybersecurity regulations, and industry best practices.
Support incident response and data-breach investigations.
Develop and review processes to ensure compliance with local laws, rules, and codes.
Coordinate with internal teams and external agencies on legal issues, emergency events, and litigation.
Promote interagency cooperation and maintain timely, accurate correspondence.
Prepare and review legal documents, research applicable laws, and draft explanatory materials for agency and public use.
Lead special projects and perform administrative duties as directed.
Serve as acting supervisor during temporary absences.
Participate in EOC training, drills, and exercises and work non-business hours during some emergencies.
Meet the grant-related training requirements associated with the federal Emergency Management Performance Grant.