Description
Salesforce’s Legal team is looking for an experienced, highly-engaged, and collaborative cybersecurity lawyer to serve as our Senior Legal Counsel, Cybersecurity, providing front line support for Salesforce’s Government Cloud. Government Cloud is a dedicated cloud service platform designed to provide U.S. public sector organizations the ability to scale and secure applications on a trusted platform. This role will also contribute to the Cybersecurity Legal program more broadly, including: helping manage data security incidents, providing guidance to engineering teams on cybersecurity and data protection issues, assisting with regulatory submissions, and generally driving cybersecurity advice across various product and regulatory areas. The ideal candidate has 3+ years of data security, data privacy, data protection, and governance experience and a strong grasp of online technologies. The right candidate will have experience providing pragmatic guidance and direction to product, engineering, and marketing teams to ensure products and processes comply with applicable laws (data privacy, data handling, marketing, etc). This role will involve extensive cross-functional work across functions such as Sales, Product, Engineering, and Customer Support. They must be skilled at translating legal concepts into practical advice and an active driver of solutions. They must thrive in a cross-functional, fast-moving environment. This role will join a team of skilled cybersecurity, privacy, AI, and data protection attorneys across the U.S., EU, and JAPAC, and a global department of legal professionals.
Description of Role
Serve as a partner in the business and trusted counsel to executives, product managers, security teams and engineers to ensure that Salesforce products, services and infrastructure are U.S.-public-sector ready and comply with applicable laws, including privacy regulations and U.S. government specific regulatory and control frameworks.
Provide front-line support for all Government Cloud security incidents requiring legal analysis and/or incident reporting.
Advise Security, Engineering and Product teams on the impact of new public sector laws and regulations.
Advise on legal/security related matters impacting sensitive government customer deployments of products.
Collaborate with the Public Sector Commercial Legal Team regarding new and developing laws and regulations related to U.S. government contracting and procurement requirements relating to the sale of our products to government customers
Partner closely with cross-functional teams (e.g., Security, Product, Engineering, Marketing, and other corporate teams) to assess and provide guidance on potential security risks and regulatory requirements for Salesforce's business operations, products and services.
Stay current on evolving cybersecurity, information security, information technology, data breach notification laws, developments, and frameworks in order to provide practical and strategic advice to the business, and Security.
Assist in leading the development, enhancement, maintenance, and compliance activities for Salesforce's incident response program.
Provide legal analysis regarding notification obligations for Salesforce’s incident response efforts.
Provide periodic review and drafting to help maintain Salesforce's Security, and data policies, standards, and processes.
Advise on technology-related regulatory and compliance issues.
Required Skills and Qualifications
Juris Doctor degree and admitted to practice in at least one U.S. jurisdiction
At least 12+ years combined legal experience in a law firm and/or in-house legal department (preferably in the technology industry, or with a government independent software vendor (ISV) or government systems integration service provider experience or government related product counseling experience).
Significant experience providing legal advice and counsel on governance and compliance issues arising from engagements with the U.S. Federal Government or other regulatory frameworks.
Familiarity with key regulatory requirements in the SaaS and public cloud space, including privacy and data protection issues.
Knowledge of and practical experience with FedRAMP, public sector technology compliance issues, and strong technical background, preferred.
Cybersecurity subject matter expertise with tech regulation and experience of interaction with data privacy authorities and/or regulatory agencies.
Excellent project management skills, well organized, with the ability to thrive in a fast-paced work environment and manage numerous projects simultaneously under deadline pressure.
A high-level of intellectual, professional and interpersonal agility and flexibility, combined with sound judgment and high tolerance for ambiguity.
Team oriented, with ability to keep a cool head, empathy, and a sense of humor in busy and high-pressured environments.
Strong understanding of the technology regulatory landscape.
Proven experience in building and maintaining relationships with regulators.
Excellent communication skills, with a collaborative approach to problem-solving.
Familiarity with regulatory environments in multiple jurisdictions, particularly in the U.S. and Europe.
Impeccable integrity, character, and a desire to work for a values-based company.
This role is hybrid and goes into the office 3 days per week.
