Associate General Counsel, Cybersecurity and Privacy

at  Stewart Title Guaranty Company

Are you looking to help transform a company and an industry? As a Stewart employee, you’ll be joining a company that is committed to helping you own, develop, and nurture your career while growing our company. We invest in your career journey because we understand that as you grow so does our company. You will be part of a diverse and equitable work environment that reflects the customers we serve. You’ll be empowered to use your unique experiences, passion and skills to help our company constantly evolve and improve. Together, we can achieve our vision of becoming the premier title services company.
More information can be found at
https://www.stewart.com
, subscribe to the Stewart blog at
https://blog.stewart.com
or follow Stewart on Twitter® @stewarttitleco.
Job Description
Job Summary
The Associate General Counsel, Cybersecurity and Privacy will support IT through ensuring compliance with cybersecurity, privacy and AI laws, data governance, and the development of compliance programs and mitigating risk by establishing incident response protocol. This is a newly created role for the company and will serve as the Head of Privacy. The position will report to the Chief Legal Officer.

Job Responsibilities

• Provide leadership, guidance, education, and training to IT Security team on cyber security, privacy, data governance, AI legal requirements, as well as national and state-wide regulatory cyber security requirements (i.e., New York Department of Financial Services (NYDFS) Cybersecurity Regulation, CCPA, CPRA, GDPR, SEC).
• Monitor and analyze developments in cyber security and privacy laws and regulations, keeping IT and the cyber security teams informed and compliant.
• Develop and oversee the company’s data privacy compliance program, ensuring adherence to global data protection regulations.
• Lead the legal aspects of incident response, including investigation, notification, and remediation of data breaches and cybersecurity incidents.
• Review and evaluate policies and contracts to ensure compliance with cyber security and data requirements.

Baseline Leveling Criteria

• Provides direction within the area of expertise to contribute to the body of knowledge, strategy, and business results.
• May lead highly visible multidisciplinary project teams and/or initiatives critical to the organization’s strategic goals.
• Proactively identifies and solves the most complex problems.
• Influences decisions through negotiations with senior management, customers, regulators or vendors
• Individual contributor working independently with no oversight required.

Education

• A Juris Doctorate from an accredited law school is required, along with bar membership in good standing.

Experience

• Minimum of 10 years of legal experience required including in-house experience. Background in Technology or IT law preferred.

Skills:

• Cyber security experience.
• Excellent legal research, writing, and analytical skills.
• Strong negotiation and contract management abilities.
• Ability to manage multiple priorities and work under tight deadlines.
• Effective communication and interpersonal skills.
• High level of integrity and professional ethics.

Preferred Qualifications:

• Certification in information security or privacy (e.g., CIPP, CISSP).
• Experience handling cybersecurity incidents and data breaches.
• Familiarity with emerging technologies, such as AI, cloud computing, IoT, and blockchain.

Equal Employment Opportunity Employer
Stewart is committed to ensuring that its online application process provides an equal employment opportunity to all job seekers, including individuals with disabilities. If you have a disability and need assistance or an accommodation in the application process, please contact us by email at
careers@stewart.com

• Provide leadership, guidance, education, and training to IT Security team on cyber security, privacy, data governance, AI legal requirements, as well as national and state-wide regulatory cyber security requirements (i.e., New York Department of Financial Services (NYDFS) Cybersecurity Regulation, CCPA, CPRA, GDPR, SEC).
• Monitor and analyze developments in cyber security and privacy laws and regulations, keeping IT and the cyber security teams informed and compliant.
• Develop and oversee the company’s data privacy compliance program, ensuring adherence to global data protection regulations.
• Lead the legal aspects of incident response, including investigation, notification, and remediation of data breaches and cybersecurity incidents.
• Review and evaluate policies and contracts to ensure compliance with cyber security and data requirements