Counsel, Privacy and Security

You have a clear vision of where your career can go. And we have the leadership to help you get there. At CNA, we strive to create a culture in which people know they matter and are part of something important, ensuring the abilities of all employees are used to their fullest potential.
CNA seeks to offer a comprehensive and competitive benefits package to our employees that helps them - and their family members - achieve their physical, financial, emotional and social wellbeing goals.
For a detailed look at CNA's benefits, check out our Candidate's Guide .
CNA is seeking an individual to serve as Counsel related to Privacy and Security requirements. This individual will be a member of CNA's Privacy Office. The Privacy Office is within the Corporate Compliance team in CNA's Law Department. The role will provide full legal services related to Privacy and Security requirements across the Company, and will have a shared implementation and operational role for compliance with those requirements. Work assignments consist of major legal and compliance tasks involving new and complex problems, requiring considerable legal judgement, experience, and independent reasoning.
JOB DESCRIPTION:
Essential Duties & Responsibilities
Performs a combination of duties in accordance with departmental guidelines.
With a focus on Privacy and Security -

• Counsels management on matters of legal risk and obligation, including but not limited to:
  • Compliance with new and existing laws and regulations
  • responding to potential data breaches and company response process
  • managing data and record retention.
• Provides research, legal analysis, counsel and guidance on legal questions or issues.
• Provides opinion and/or prepares position papers on various legal issues and interpretation of contractual provisions.
• Advises on contractual requirements and inquiries received from third parties.
• Monitors legal and regulatory developments; counsels management regarding changes, and leads efforts to implement changes within business areas.
• Advises on training programs. May train departments or clients on appropriate procedures.
• Works with internal and external clients while resolving legal issues. Collaborate closely with Compliance, Law, Information Security, International colleagues, and business areas.
• Responds to government agencies.
• Participates in and leads special projects to strengthen the company's privacy and records management framework and mitigate compliance issues.
• May perform additional duties and or assist in other areas of the department, as needed.

Reporting Relationship:

• Director or above

Skills, Knowledge & Abilities

• Strong knowledge of the theories, principles, practices and procedures of legal risk and management within an insurance organization.
• Strong knowledge of US and International Privacy and Security laws and regulations, including but not limited to, CPRA, HIPAA, GDPR, PIPEDA, PIPL, and NYDFS Cyber requirements.
• Excellent verbal and written communication, negotiation and presentation skills.
• Strong consultative and facilitation skills with the ability to effectively interact with all internal and external business partners.
• Ability to translate legal risk into actionable steps for internal business partners.
• Excellent project management, organization and planning skills with the ability to effectively manage multiple projects.
• Ability to exercise independent judgement, and to work with and maintain confidential and sensitive information.
• Excellent analytical and problem solving skills, and senior level skill in managing ambiguous situations and issues.
• Proven ability to take a proactive long-term view of business goals and objectives in order to achieve strategic business results.
• Knowledge of Microsoft Office Suite and other business-related software.

Education & Experience

• Bachelor's degree with JD, and admission to the bar of at least one state.
• Typically a minimum of four years of legal experience with a proven track record of results

#LI-CP1
#LI-Remote
CNA is committed to providing reasonable accommodations to qualified individuals with disabilities in the recruitment process. To request an accommodation, please contact [email protected] .