Cybersecurity Legal Counsel

Whether you’re at the start of your career or looking to discover your next adventure, your story begins here. At **Citi**, you’ll have the opportunity to expand your skills and make a difference at one of the world’s most global banks. We’re fully committed to supporting your growth and development from the start with extensive on-the-job training and exposure to senior leaders, as well as more traditional learning. You’ll also have the chance to give back and make a positive impact where we live and work through volunteerism.

**Shape your Career with Citi**

Citi’s **Global Legal Affairs and Compliance** **(GLAC)** empowers and protects Citi by providing legal, compliance, investigative, and security services to our firm. We manage compliance risk, provide legal analysis and advice, protect Citi’s people and businesses, advocate for legal and regulatory outcomes that benefit our firm and our clients, and ultimately promote behavior that is consistent with Citi’s mission and culture.

We’re currently looking for a high caliber professional to join our team as **Vice President**,**Cybersecurity Legal Counsel** -**Hybrid** (Internal Job Title: Lead Counsel 2 - Enterprise - C13) based in Singapore. Being part of our team means that we’ll provide you with the resources to meet your unique needs, empower you to make healthy decisions and manage your financial well-being to help plan for your future. For instance:

- Citi provides programs and services for your physical and mental well-being including access to telehealth options, health advocates, confidential counseling and more. Coverage varies by country.
- We believe all parents deserve time to adjust to parenthood and bond with the newest members of their families. That’s why in early 2020 we began rolling out our expanded Paid Parental Leave Policy to include Citi employees around the world.
- Citi provides access to an array of learning and development resources to help broaden and deepen your skills and knowledge as your career progresses.

The Lead Counsel 2 is a senior level position responsible for providing Citi businesses and functions with legal counsel on all matters related to cybersecurity. The primary responsibility of this role is to provide legal support, advice, and guidance, in coordination with the Cybersecurity Legal team and under the supervision of the Cybersecurity Legal group manager, on cybersecurity matters across Citi, with a particular emphasis on Citi’s Japan, Asia North, Australia, and Asia South clusters.

This role requires a pragmatic, proactive attorney with thorough understanding of cybersecurity, combined with a solid conceptual / practical grounding in the laws and regulations for the geographies in which we operate. The attorney occupying this role will provide input into strategic decisions, exercise sound legal judgment to develop proactive, risk-appropriate, and commercially business-oriented solutions.

**In this role, you’re expected to**:

- Provide counsel on all aspects of cybersecurity incident prevention and response, including customer and regulatory notifications, contractual obligations, and legal risk mitigation, to cyber and information security stakeholders.
- Advise business stakeholders on regulatory inquiries regarding cyber and information security issues and/or events.
- Advise Citi’s Cybersecurity Fusion Center (CSFC) and Citi’s business lines on legal risks associated with various components of Citi’s cyber and information security program, including matters involving incident response strategies, incident investigations, and regulatory compliance.
- Track existing and proposed cybersecurity rules and regulations in Asia-Pacific jurisdictions and advise on legal interpretations in order to inform a compliance strategy.
- Draft cybersecurity presentations, exercises, and trainings, as well as present and participate as needed.
- Advise on the development and implementation of information security governance.
- Update cybersecurity policies, playbooks, and procedures.
- Support data privacy activities in the context of the cybersecurity program and incident response.
- Collaborate with colleagues throughout the CSFC and the Legal Department.

Additional Job Requirements:

- Excellent research and analytical skills.
- Strong verbal and written communication skills with the ability to interface with all levels of the organization.
- Proven ability to prioritize and manage multiple projects, as well as work under tight time pressures.
- Highly responsive and client relationship focused.
- Excellent attention to detail and strong problem-solving abilities to deal with unforeseen events.
- Exceptional time-management skills and the willingness to work outside of normal business hours during emergency events.
- Minimum 5 years PQE (post-qualifying experience).
- Minimum 2 years of Cybersecurity experience.
- Strong interest in pursuing a specialization in cybersecurity.
- Knowledge of cybersecurity laws,