Sr. Counsel – Cybersecurity & Data Privacy

Cboe Global Markets•Chicago, IL

20h•Hybrid

About The Position

Building trusted markets — powered by our people. At Cboe Global Markets, we inspire our people to solve complex challenges together because what we do matters. We provide the financial infrastructure that powers the global economy. As a leading provider of market infrastructure and tradable products, Cboe delivers cutting-edge trading, clearing and investment solutions to market participants around the world. We’re building inclusive ways to support professional and personal development while strengthening the trust we’ve earned as a global market leader. Our teams are empowered to share ideas, actively pursue them and bring on a challenge. As champions of internal mobility and access to opportunity, we encourage our people to “go for it” and equip our managers with the training to coach their teams to the next level. We strive to provide employees a safe space to network, share ideas and create opportunities. Cboe is seeking a Senior Counsel to provide legal support to all levels of the organization on legal, regulatory, and reputational aspects of cybersecurity, data protection and privacy, artificial intelligence, and intellectual property, including current and emerging legal and regulatory requirements and trends, compliance initiatives, and cyber and data-related investigations. As an operator of exchanges and other trading venues, Cboe operates in a highly regulated environment and compliance by Cboe with its legal and regulatory obligations is paramount in the conduct of its business. This position will also support Cboe’s Compliance group on oversight of other emerging compliance risks, such as sanctions and trade controls, AML and FCPA compliance, as well as other regulatory frameworks applicable to global exchange operators. In fulfilling these duties, this position will also collaborate with and manage outside counsel and other experts as necessary. Further, depending on the division’s needs and the individual’s interests, the position may also provide the opportunity to gain experience in other legal areas relating to Cboe’s diverse businesses. This position is in Chicago, Illinois.

Requirements

Minimum of 5 years of experience as a practicing attorney, including a minimum of 3 years with a focus on cybersecurity, data protection, privacy and/or other technology and compliance-related risks.
Ability to effectively communicate both orally and in writing and to effectively interact with internal and external contacts.
A working knowledge of incident response frameworks and handling procedures, US privacy and cybersecurity laws.
Ability to create and execute detailed project plans and effectively collaborate with stakeholders.
Strong attention to detail and the ability to articulate complex concepts with the level of detail that is necessary for various regulatory and other written communications.
Ability to work both independently and cooperatively in group situations; offer assistance and support to co-workers; balance team and individual responsibilities; exhibit objectivity and openness to others' views; give and welcome feedback.
Proven analytical and problem-solving skills.
Ability to organize and prioritize work assignments; strong time management experience and skills; and ability to complete multiple tasks simultaneously with accuracy and quality, to adjust to changes in priorities and situations, and to meet deadlines.
Member in good standing of at least one state bar association.
Bachelor’s Degree and Juris Doctorate.
Licensed to practice law.
Computer proficiency in Microsoft Office Suite applications including Word, PowerPoint, Excel, and Outlook, as well as document management and other office technologies.

Nice To Haves

Experience with intellectual property, particularly patents, and previous employment with highly regulated institutions, including financial institutions, are desirable.
Prior employment in financial services, experience with regulatory investigations and/or government enforcement actions, familiarity with international privacy and data protection laws, and one or more of the following certifications is a plus: Certified Information Security Manager (CISM), Certified Information Systems Security Professional (CISSP), Certified Information Privacy Professional (CIPP), or other relevant certifications offered by the International Association of Privacy Professionals.

Responsibilities

Work collaboratively across the organization to provide legal support for the cybersecurity, data protection, and artificial intelligence programs (including legal support for regulatory and audit functions, as needed), and establish appropriate relationships with responsible members of relevant departments, such as Risk, Information Security, Marketing and Communications (MarComms) and Compliance, to ensure coordinated and appropriate responses to incidents, issues, and opportunities related to cybersecurity, data protection, and artificial intelligence.
Consult with senior leadership and Cboe’s Boards of Directors and responsible Committees regarding cybersecurity preparedness and strategy.
Lead or support legal involvement in incident response for a broad range of circumstances including fraud, insider risk, data breach, availability attacks and other computer security events, etc. Align and manage processes to preserve privilege.
Assist with management of outside counsel and other relevant professionals and collaborate with them and Cboe management and associates regarding various cyber and data protection efforts, including compliance with current and emerging legal and regulatory requirements and best practices; risk assessment and management; conducting tabletop exercises with management, Boards and Committees, and other internal departments; preparation for and management of incident response; and compliance with regulatory reporting requirements.
Collaborate with Cboe’s Risk group, including Cboe’s Chief Information Security Officer, on threat investigations and programs, including participation in Cboe’s enterprise risk management program and insider threat group.
Maintain fluency with domestic and international cybersecurity, privacy and data protection laws and regulations impacting Cboe as a financial institution. As needed, provide business and risk partners strategic legal counsel that not only meets current requirements, but anticipates changes (to law and/or technology) to better maintain business flexibility and efficiency.
Provide legal support to Cboe’s incident response program, including with respect to investigating potential incidents, identifying applicable legal obligations, and managing the company’s notification of and response communications to confirmed data security incidents working in collaboration with Cboe’s Risk, Information Security and MarComms departments.
Provide counsel on company responses to regulatory inquiries and litigation concerning technology, cybersecurity, and data privacy matters.
Provide counsel on the intellectual property efforts of Cboe, including patent, copyright, and trademark matters.
Provide legal support in respect of other areas of emerging risk, such as sanctions and trade controls, anti-money laundering rules and regulations, compliance with the Foreign Corrupt Practices Act, and other similar areas requiring coordinated and company-wide compliance programs.
Assist with various legal projects across the Legal Division and perform other duties as assigned.

Benefits

Fair and competitive salary and incentive compensation packages with an upside for overachievement
Generous paid time off, including vacation, personal days, sick days and annual community service days
Flexible, hybrid work environment, where you choose where and how you work
Health, dental and vision benefits, including access to telemedicine and mental health services
2:1 401(k) match, up to 8% match immediately upon hire
Discounted Employee Stock Purchase Plan
Tax Savings Accounts for health, dependent and transportation
Employee referral bonus program
Volunteer opportunities to help you give back to your communities
Complimentary lunch, snacks and coffee in any Cboe office
Paid Tuition assistance and education opportunities
Generous charitable giving company match
Paid parental leave and fertility benefits
On-site gyms and discounts to other fitness centers