Senior Legal Counsel – Cybersecurity & Data Protection

PayPal’s Legal team is looking for an experienced, highly-engaged, and collaborative cybersecurity lawyer to serve as Legal Counsel, Cybersecurity & Data Protection. this role will include: helping manage data security incidents, providing guidance to global teams on cybersecurity issues, researching global regulatory obligations & tracking global regulatory submissions, and generally providing relevant guidance.

The ideal candidate has 8+ years of incident response, crisis management, data security, data protection, and cybersecurity governance experience and a strong grasp of online technologies. They must be skilled at translating legal concepts into practical advice and an active driver of solutions. They must thrive in a cross-functional, fast-moving environment.

Essential Responsibilities:

• Provide clear, pragmatic, and solution-oriented legal advice to enable business strategy while managing legal risk.
• Participate in complex problem resolution, providing expert legal advice on high-stakes issues and disputes.
• Ensure compliance with relevant laws and regulations.
• Partner with business counterparts across the enterprise to help drive the delivery of effective legal services.
• Manage legal risks and safeguard PayPal's legal interests, developing comprehensive risk management frameworks.
• Escalate complex issues to senior legal leadership where appropriate.

Minimum Qualifications:

• 8+ years relevant experience and a Juris doctorate degree OR Any equivalent combination of education and experience.

Additional Responsibilities & Preferred Qualifications:

• Demonstrated experience managing data security incidents from a legal perspective and operating within an enterprise incident response program, including incident scoping, privilege preservation, identifying applicable legal obligations, coordinating cross-functional teams, and managing outside counsel under compressed timelines. 
• Proven ability to manage concurrent multijurisdictional incidents involving cross-border notification obligations across legal, regulatory, and merchant/consumer communication workstreams. 
• Experience managing regulatory reporting timelines and drafting notifications compliant with ICO, EU supervisory authority, FCA, and U.S. regulatory requirements. 
• Cybersecurity subject matter expertise with knowledge of cybersecurity and data protection regulations and frameworks (e.g., NIST Cybersecurity Framework, ISO 27001, GDPR, SOC 2, or CCPA) especially those related to financial institutions.  
• Knowledge of cutting-edge IT, web, mobile, and payment ecosystem technologies (especially those used in the collection, storage and analysis of data) and their data security implications. 
• Excellent project management skills, well organized, with the ability to thrive in a fast-paced work environment and manage numerous projects simultaneously under deadline pressure. 
• A high-level of intellectual, professional and interpersonal agility and flexibility, combined with sound judgment, curiosity, and high tolerance for ambiguity. 
• Team oriented, with ability to keep a cool head, empathy, and a sense of humor in busy and high-pressured environments. 
• Fintech experience preferred but not required. 

**We know the confidence gap and imposter syndrome can get in the way of meeting spectacular candidates. Please don't hesitate to apply.