Advise on legal and regulatory obligations applicable to cybersecurity incidents, including materiality assessments, regulatory notifications, disclosure requirements, and client/advisor communications.
Serve as the primary legal advisor for incident response, working closely with Information Security, Technology, Communications, Compliance, and executive leadership during cyber and data events.
Monitor and interpret evolving cybersecurity regulations (e.g., NYDFS Cybersecurity Rules, state breach laws, privacy laws, SEC/FINRA expectations) and assess their impact on business operations.
Support crisis management activities and provide legal guidance on escalation, response coordination, and regulatory engagement during high-priority events.
Draft, review, and update cybersecurity and incident response policies, standards, procedures, and playbooks, including enhancements to the firm’s incident response program and governance model.

Juris Doctor (JD) from an accredited law school; licensed to practice in at least one U.S. jurisdiction.
8–12+ years of legal experience with a strong background in cybersecurity, data security, privacy, technology law, or incident response.
Experience in financial services with exposure to broker-dealer and/or investment advisory regulatory environments (SEC, FINRA, MSRB, banking regulators).
Experience advising on cyber incident response, materiality assessments, regulatory notifications, and supervisory expectations.
Familiarity with cybersecurity regulations and frameworks, including NYDFS Cybersecurity Rules, state breach laws, Reg S-P, SEC/FINRA expectations, and data protection statutes.

VP, Assistant General Counsel – Cybersecurity

Key skills