Job Title: Senior Compliance Specialist
Cyber and security legal consultant with expertise in contract review, required to work on EMEA region contracts. The role involves reviewing cyber contracts, ensuring clients' cybersecurity requirements are met, and collaborating with client and vendor counterparts.
Key Responsibilities:
* Reviewing cyber contracts in the EMEA region.
* Ensuring clients' cybersecurity requirements are met by working closely with counterparts in client and vendor organizations.
* Understanding information technology fundamentals, including computer networks, systems architecture, software development lifecycles, and cloud computing.
* Applying cybersecurity principles, such as encryption, authentication, access control, incident response, and vulnerability management.
* Developing a comprehensive understanding of national and international legal regimes governing data security, privacy (e.g., GDPR, DORA), and electronic transactions.
Technical Skills:
* Establishing scope and clarity on services, technologies used, and parties' responsibilities through detailed technical descriptions within contracts.
* Specifying security requirements by referencing compliance frameworks like ISO/IEC 27001, NIST Cybersecurity Framework, or PCI DSS.
* Mandating security controls, including network segmentation, endpoint protection, regular penetration testing, or use of specific encryption algorithms.
* Outlining incident response procedures, including identification, containment, notification, and remediation, and assigning roles and responsibilities for each phase.
* Drafting clauses dictating data handling, collection, storage, processing, transfer, and deletion, often referencing technical mechanisms like anonymization or pseudonymization.
Requirements:
* Mid-senior level experience.
* Contract employment type.
* Information Technology and Legal job function.
* Financial Services, Banking, and Information Services industries.
Location: Dublin, Ireland.