Counsel, Privacy & Information Law - Hybrid

GEICO GEICO · Insurance · Bethesda, MD +1

GEICO is seeking a Counsel, Privacy & Information Law to advise on privacy, data-protection, cybersecurity, and technology-related legal issues. The role involves legal research, drafting guidance, assisting with incident response, developing policies, evaluating risks for new products/technologies, and monitoring legislative changes. Requires a JD, admission to practice law, and 5+ years of legal experience with a focus on privacy/cybersecurity, preferably in a regulated industry.

What you'd actually do

  1. Conduct legal research and draft legal guidance.
  2. Work with internal clients and others in the legal department to provide advice related to data-protection & privacy compliance; cybersecurity; data and information use related matters and associated technology considerations.
  3. Assist the privacy and the cybersecurity teams with responding to privacy incidents, cyber incidents, and data breaches.
  4. Assist in the development and implementation of privacy, cyber and information use policies, procedures, and training programs.
  5. Collaborate with cross-functional teams to evaluate potential privacy and infosec risks and provide practical solutions.

Skills

Required

  • Juris Doctor (JD) degree from an accredited law school.
  • Admission to practice law in at least one U.S. jurisdiction.
  • 5+ years of experience practicing law including at least 2 years focused on privacy and/or cybersecurity issues, preferably in a law firm or a highly regulated industry such as insurance or financial services.
  • Experience with U.S. federal and state data-protection laws (e.g., CCPA/CPRA, FCRA, GLBA, TCPA) and cyber and information use laws (CISA, NYDFS, others.)
  • Strong understanding of technology and ability to communicate with both business units and IT/cybersecurity engineers.
  • Strong analytical, problem-solving, and decision-making skills.
  • Excellent written and verbal communication skills, with the ability to explain complex legal concepts to non-lawyers.
  • Ability to balance legal risk and business objectives.
  • Proficiency in managing multiple priorities, projects, and stakeholders.

Nice to have

  • Financial Services/Insurance experience preferred.
  • Privacy certification such as CIPP is a plus.

What the JD emphasized

  • privacy and data-protection law
  • cybersecurity law
  • legal implications of technology deployment
  • U.S. federal and state data-protection laws
  • cyber and information use laws