Sr Attorney - Cyber, Privacy and Compliance/Assistant General Counsel - Cyber, Privacy and Compliance

Berkshire Hathaway Energy•Portland, OR

About The Position

This is a multi-level posting. Candidates may be considered for any of the posted levels, depending on their level of experience and depth of expertise. The position provides legal support for Berkshire Hathaway Energy Company to assist in its cybersecurity, data protection, artificial intelligence governance, trade sanctions and supply chain compliance. Provides legal advice on the laws and regulations applicable to these areas and on how the company can maintain compliance. Analyzes new and current laws and regulations and advises the company on its data protection, cybersecurity, artificial intelligence and trade compliance obligations.

Requirements

Must have a law degree from an accredited law school.
Must be licensed to practice law in Iowa or be licensed in one state and licensed in Iowa within one year after start date.
Six years of legal experience is required for the sr attorney level.
Eight or more years of legal experience for the asst general counsel level.
Must demonstrate sound oral and written communication skills, sound judgment, and an ability to fulfill leadership responsibilities assigned; an ownership approach to projects and tasks is critical.
Must have a good understanding of the laws in areas of expertise and proficient in its interpretation and application.
Must possess effective analytical, problem-solving and decision-making skills.
Must be able to handle critical time constraints, priorities and meet established deadlines.
Must be able to handle heavy workload, multiple project responsibilities and continually changing priorities.
Must be willing to travel periodically for projects, hearings, litigation, negotiations, etc.

Nice To Haves

Experience in a regulated industry, regulatory agency or law firm setting is a plus.
Knowledge of rules, regulations, policies, procedures and practices; applicable federal, state, and local governmental laws and regulations, preferred.
Familiarity with artificial intelligence governance frameworks, data privacy and cybersecurity requirements, and U.S. trade sanctions and export-control regimes is preferred.

Responsibilities

Provides legal advice on issues such as cyber security, data privacy, data breach protocols, and applicable law as it relates to internet technologies, mobile platforms, emerging technologies, information technology, e-commerce, e-business, mobile payments, competitive intelligence and trade secrets.
Stays current on the latest developments in data privacy and cybersecurity regulations and standards and provides recommendations on how the company can stay compliant.
Provides legal advice on laws and regulations regarding human rights, forced labor, child labor, human trafficking, responsible sourcing standards (includes governance review, policy review, mapping supply chain, developing risk assessment, developing a grievance procedure, assisting with public disclosures, assisting with trainings).
Develops and manages prohibited business practices program (includes compliance with U.S. and foreign anticorruption laws; foreign corrupt practices compliance; export and import compliance; economic and trade sanctions, including OFAC and other U.S. and foreign sanctions programs and restricted- and denied-party screening; anti-boycott laws; anti-money laundering; politically exposed persons).
Advises the business on economic and trade sanctions compliance, including U.S. (OFAC) and applicable foreign sanctions programs, screening of counterparties and transactions against restricted- and denied-party lists, and assessment of sanctions and export-control risk across vendors, supply chain relationships and cross-border activities.
Coordinates with the global supply chain department to ensure that the appropriate terms and conditions related to cybersecurity, data privacy, prohibited vendors and OFAC are in company contract templates.
Effectively partners with business leaders on a wide array of projects related to prohibited business practices compliance, cybersecurity, privacy, cloud and data transformation.
Works closely with cross-functional teams, including senior management, to provide information security and cybersecurity legal guidance to support operations and new initiatives.
Advises cybersecurity on appropriate information security and cybersecurity controls to comply with global regulatory requirements and best practices and translate legal requirements into technical design requirements.
Drafts, negotiates and advises the business on the information security, cybersecurity and supply chain compliance aspects of contracts.
Provides counsel on cybersecurity breach notification and other legal risks and obligations that flow from unauthorized network intrusions.
Develops and administers the company’s artificial intelligence governance program, including policies and standards for the responsible use of artificial intelligence and biometrics.
Reviews and evaluates proposed artificial intelligence applications, tools and use cases for legal, regulatory, privacy and contractual risk, and advises the business on appropriate controls and on approval, documentation and ongoing oversight requirements.
Works closely with cybersecurity on creating and managing a contractual arrangement with the U.S. Department of Energy, Homeland Security and U.S. based utilities to facilitate the sharing of cybersecurity threat data relevant to the industry.