Senior Cybersecurity Counsel - Senior AVP

Wells Fargo & Company•Boston, MA

1d•$139,000 - $260,000•Hybrid

About The Position

About this role: Wells Fargo is seeking a Senior Counsel-Senior Assistant Vice President as part of the Cybersecurity Legal Team within the Technology Law Division with tangible expertise and experience in U.S. and global cybersecurity and privacy laws, rules, and regulations. For additional information on this line of business, refer to the external Careers Site at Wellsfargo.com/career. This Senior Counsel-Senior Assistant Vice President will provide legal support and advice to the Chief Information Security Office and the Enterprise Business Resiliency Office, including the Enterprise Incident Management team. The Senior Counsel-Senior Assistant Vice President will serve as a trusted legal advisor and strategic partner in the supported functions. In this role, you will: Provide legal advice and represent the Company in highly complex matters and initiatives including but not limited to information security, third-party risk management, incident response, privacy and data, and security policies, procedures, and controls Provide guidance to internal clients on legal matters, legal risk assessment, planning and policy decisions, claims against the Company, probability of loss, and cost-effective risk mitigation strategies Draft complex legal documents, review and negotiate documents prepared by outside counsel, and advise on vendor agreements related to information security issues Independently resolve complex issues and assist the Cybersecurity Legal team to meet deliverables Collaborate with peers, colleagues, and mid-level managers to resolve issues and achieve goals Work directly with business clients and develop an in depth understanding of business unit activities and products Partner with business leaders and management of other corporate departments to develop and implement risk management programs

Requirements

4+ years of Law experience, or equivalent demonstrated through one or a combination of the following: work experience, training, military experience, education
Active State Bar membership or the equivalent in a country outside the United States

Nice To Haves

Experience as a practicing attorney in global financial services cybersecurity laws, regulations, and best practices, and in particular an understanding of the FFIEC, CFTC, NYDFS Cybersecurity Regulation, NIST 800-53, NIST Cyber Framework, ISO, and PCI compliance as it relates to banks.
Experience with data breach and incident response investigations
Experience working on policy issues related to cybersecurity, investigations, threat sharing, and privacy as it intersects with cybersecurity
Experience working with law enforcement and national security authorities.

Responsibilities

Provide legal advice and represent the Company in highly complex matters and initiatives including but not limited to information security, third-party risk management, incident response, privacy and data, and security policies, procedures, and controls
Provide guidance to internal clients on legal matters, legal risk assessment, planning and policy decisions, claims against the Company, probability of loss, and cost-effective risk mitigation strategies
Draft complex legal documents, review and negotiate documents prepared by outside counsel, and advise on vendor agreements related to information security issues
Independently resolve complex issues and assist the Cybersecurity Legal team to meet deliverables
Collaborate with peers, colleagues, and mid-level managers to resolve issues and achieve goals
Work directly with business clients and develop an in depth understanding of business unit activities and products
Partner with business leaders and management of other corporate departments to develop and implement risk management programs