Privacy Cyber Security Counsel

Who we are
American International Group, Inc. (AIG) is a leading global insurance organization. Building on 100 years of experience, today AIG member companies provide a wide range of property casualty insurance, life insurance, retirement solutions, and other financial services to customers in more than 80 countries and jurisdictions. These diverse offerings include products and services that help businesses and individuals protect their assets, manage risks and provide for retirement security.

Get to know the business
Life and Retirement is a unique franchise that brings together a broad portfolio of life insurance, retirement and institutional products offered through an extensive, multichannel distribution network. It holds longstanding, leading market positions in many of the markets it serves in the U.S.

AIG’s Global Legal, Compliance, Regulatory and Government Affairs department is comprised of attorneys and other professionals providing high quality advisory and transactional support with integrity and objectivity across all parts of the organization. The team ensures an operating environment that minimizes legal, regulatory and reputational risks and complies with all laws and regulations and AIG policies & procedures. This is a global, diverse and award-winning team that has been recognized for its leadership and innovative solutions. You will also be able to participate in AIG’s award-winning pro bono program.

About the role
Life and Retirement is looking to add a highly skilled Data Privacy and Cybersecurity Attorney to its Life & Retirement Legal, Compliance and Regulatory department. This role offers the opportunity to join an award-winning Legal department and work directly with key members of Legal, Compliance, IT and various business teams on a variety of cutting-edge projects.

We are seeking an experienced privacy professional with in-depth knowledge of international, federal and state laws and regulations regarding data protection, privacy and data security to provide counsel on data privacy and security related matters. As the Data Privacy and Cybersecurity Attorney, you will have the opportunity to work with a dynamic and experienced team on privacy
and information security issues impacting AIG’s products, businesses, customers and employees. You will work with cross functional teams to develop the privacy and cybersecurity legal strategy, and design innovative privacy and security solutions, for our business partners.

Responsibilities include:

• Advising on legal and regulatory developments impacting data privacy and data security, including identifying trends and potential impacts on the business’s risk management activities.
• Advising AIG’s Life & Retirement businesses on complying with data privacy and cybersecurity laws and, working with local counsel, enabling the development of new products and services.
• Working with Compliance colleagues, including AIG’s Chief Privacy Officer, developing and providing business partners general and targeted data privacy and data security counseling and training.
• Supporting AIG’s Life & Retirement Chief Information Security Officer in drafting and/or reviewing IT Security policies, standards and programs to ensure adherence to data security legal requirements.
• Providing legal guidance on the company’s data privacy and data security programs and providing support for their implementation, maintenance and compliance throughout the organization, including the company’s third-party risk management program.
• Managing potential liability and other legal aspects related to data privacy and data security incidents and supporting the company’s incident response program, including investigating potential incidents, identifying applicable legal obligations, and supporting incident response.
• Responding to regulatory inquiries and serving as a liaison with regulators on privacy and data security issues, in coordination with local legal, compliance and other stakeholders as appropriate.
• Developing and updating data privacy/cybersecurity templates (e.g., contract language, consents, and privacy notices), and providing counseling on the use of such templates to compliance and legal colleague and working with local counsel as subject matter expert on complex data privacy and security provisions in agreements with service providers, business partners and other transaction parties.
• Providing legal support to work streams and processes relating to the EU General Data Protection Regulation (GDPR), including advising on Data Protection Impact Assessments (DPIAs), and, when finalized, the EU ePrivacy Regulation.
• Managing outside counsel and third-party consulting firms on discreet data privacy and data security projects, as needed.

What you need to know:

• Experienced lawyer with 5+ years of experience in Data Privacy and Cybersecurity at a major law firm and/or with a large multinational/global organization, or within a government agency.
• Familiarity with information technology developments, including cybersecurity software and the cloud industry.
• Expertise in U.S. and Europe, with particular focus on the UK and Ireland data privacy laws, regulations and practices, including an in-depth understanding of the GDPR.
• Experience responding to data incidents, including forensic investigations, notifications to consumers and regulators, and other external communications.
• Knowledge of data security laws, industry standards and best practices.
• Experience in responding to regulatory inquiries involving data privacy and data security matters.
• Ability to communicate effectively with all levels of internal management, customers, regulators and other stakeholders.
• Relevant technical certifications such as a Certified Information Security Manager (CISM), Certified Information Systems Security Professional (CISSP), or Certified Information Privacy Professional (CIPP) or other relevant certifications offered by the International Association of Privacy Professionals preferred, but not required.
• Experience advising on big data, data analytics, and data usage legal strategy are a value add.

What our employees like most about working for AIG

• We care about your professional development. Our career progression program will provide you with the opportunity to develop your skills, strengthen your productivity and be eligible to progressively advance to positions with an increased responsibility and increased compensation.
• Our “Giving Back” policy is at the core of our daily operations and guides our future progress. Don’t believe us? We put our money where our mouth is! AIG will give you up to 16 hours a year paid time off to volunteer in the community.
• Our people are our most important asset therefore we provide a generous benefits plan and competitive pay.

Benefit package includes:

• Paid Time Off (AIG recognizes the importance of work life balance). We offer 24 PTO days to start. YES, 24!
• 9 paid holidays per calendar year.
• A 401(k) Retirement Plan which will be HARD TO BEAT. Our 401K – $1 for $1 match up to 6% with immediate vesting, plus AIG automatically contributes an additional 3% into your 401K regardless of if you enroll or not.

We are an Equal Opportunity Employer

American International Group, Inc., its subsidiaries and affiliates are committed to be an Equal Opportunity Employer and its policies and procedures reflect this commitment. We provide equal opportunity to all qualified individuals regardless of race, color, religion, age, gender, gender expression, national origin, veteran status, disability or any other legally protected categories such as sexual orientation. At AIG, we believe that diversity and inclusion are critical to our future and our mission – creating a foundation for a creative workplace that leads to innovation, growth, and profitability. Through a wide variety of programs and initiatives, we invest in each employee, seeking to ensure that our people are not only respected as individuals, but also truly valued for their unique perspectives.

To learn more please visit: https://www.aig.com/about-us/diversity-equity-and-inclusion

AIG is committed to working with and providing reasonable accommodations to job applicants and employees with physical or mental disabilities. If you believe you need a reasonable accommodation in order to search for a job opening or to complete any part of the application or hiring process, please send an email to [email protected]. Reasonable accommodations will be determined on a case-by-case basis.

We consider qualified applicants with criminal histories, consistent with applicable law. In order to work from or visit an AIG office, and in accordance with the terms and conditions of AIG’s COVID-19 vaccination policy, individuals hired into this position will be required to attest that they have been fully vaccinated and agree to have their vaccination status and proof of vaccination confidentially stored by AIG. Exemptions may be considered on a case-by-case basis in accordance with applicable law.Functional Area:

LG – Legal, Regulatory & Gov’t Affairs Estimated Travel Percentage (%): Up to 25% Relocation Provided: No American General Life Insurance Company