Drimva

Thomson Reuters

Senior Legal Counsel - Cybersecurity & Privacy

$120K–$222K

United States of America, Frisco, Texas +1 · Hybrid · Senior · Full-time · Posted Oct 19, 2026

Location
United States of America, Frisco, Texas
United States of America, Eagan, Minnesota
Experience
8+ years of experience practicing privacy and/or cybersecurity law, in a law firm, in-house, or both.
Education
J.D.

About the job

Serves as the primary legal advisor on cybersecurity and privacy, guiding incident response, regulatory compliance, security assessments, product risk, and related contracts across global regions.

What you'll do

  • Lead legal response to security incidents and breaches, including regulator and customer communications; develop global response plans and notification playbooks.
  • Advise on privacy and cybersecurity regulations, federal security frameworks, assessments, authorization packages, and regulatory engagement.
  • Guide product and engineering teams on privacy and security risk, oversee PIAs/DPIAs, negotiate cybersecurity contract terms, and report on legal risk and compliance.

What they ask for

  • J.D. and active bar membership in at least one US jurisdiction, in good standing.
  • 8+ years of experience practicing privacy and/or cybersecurity law.
  • Substantive experience advising on data breach response and incident management, including direct engagement with regulators such as state Attorneys General.
  • Expertise in EU cybersecurity regulation and working knowledge of US privacy and cybersecurity law and federal security frameworks; experience with assessments or authorization packages and PIAs/DPIAs.

Nice to have

  • CIPP/US, CIPP/E, CIPM, or CIPT certification.
  • Working knowledge of APAC breach and cybersecurity regimes.

Pay

$119,700 USD - $222,300 USD (base compensation range)

Tools

OneTrust, NIST 800-53 Rev 5, NIST 800-171, FedRAMP, CMMC, HIPAA, CCPA/CPRA, GDPR

AI focus

Advise product and engineering teams on emerging AI and data regulation.

Model-written summary · the original posting is authoritative

First seen Oct 28, 2026 · Last verified Nov 6, 2026 (UTC)