VP, Assistant General Counsel, Cybersecurity

We're looking for strong collaborators who deliver exceptional client experiences and thrive in fast-paced, team-oriented environments. Our ideal candidates pursue greatness , act with integrity , and are driven to help our clients succeed . We value those who embrace creativity, continuous improvement, and contribute to a culture where we win together and create and share joy in our work.

- Juris Doctor (JD) from an accredited law school; licensed to practice in at least one U.S. jurisdiction.

- 8-12+ years of legal experience with a strong background in cybersecurity, data security, privacy, technology law, or incident response.

- Experience in financial services with exposure to broker-dealer and/or investment advisory regulatory environments (SEC, FINRA, MSRB, banking regulators).

- Experience advising on cyber incident response, materiality assessments, regulatory notifications, and supervisory expectations.

- Familiarity with cybersecurity regulations and frameworks, including NYDFS Cybersecurity Rules, state breach laws, Reg S-P, SEC/FINRA expectations, and data protection statutes.

- Experience drafting and maintaining cybersecurity policies, incident response procedures, standards, and playbooks.

- Strong analytical and problem-solving skills, with the ability to translate complex technical concepts into actionable legal guidance.

- Excellent written and verbal communication skills, including experience presenting to executive leadership during time-sensitive events.

- Ability to manage multiple priorities in a fast-paced, high-stakes environment.

- Collaborative mindset with the ability to work across technical, business, legal, compliance, and risk teams.

- In-house experience in a financial services or regulated technology environment.

- Experience advising on supervisory exams, regulatory inquiries, and remediation efforts involving cyber or technology controls.

- Knowledge of cybersecurity technologies and ecosystem components (e.g., logging/monitoring, endpoint security, IAM, cloud environments, threat detection platforms) is a plus.

- Familiarity with crisis management practices and communications during cyber or data events