Senior Director, Corporate Counsel - Cybersecurity & Privacy

Get to know Okta
Okta is The World’s Identity Company. We free everyone to safely use any technology—anywhere, on any device or app. Our Workforce and Customer Identity Clouds enable secure yet flexible access, authentication, and automation that transforms how people move through the digital world, putting Identity at the heart of business security and growth. 
At Okta, we celebrate a variety of perspectives and experiences. We are not looking for someone who checks every single box - we’re looking for lifelong learners and people who can make us better with their unique experiences. 
Join our team! We’re building a world where Identity belongs to you.

Senior Director, Corporate Counsel - Cybersecurity & Privacy

Accelerate your career by joining Okta, the World’s Identity Provider, as a member of our Privacy and Product Legal teamWe free everyone to safely use any technology—anywhere, on any device or app. Our Workforce and Customer Identity Clouds enable secure yet flexible access, authentication, and automation that transforms how people move through the digital world, putting Identity at the heart of business security and growth. As Senior Director, Corporate Counsel - Cybersecurity & Privacy, you will lead a global cybersecurity and privacy legal practice at a high-growth, publicly-traded enterprise software company. You will work on cutting-edge projects in a cloud-first, SaaS environment where you can apply your experience providing strong legal support to help Okta deliver world-class products to our thousands of global customers.

What you’ll be doing 

• Lead and develop Okta’s team of talented, high-performing Cybersecurity and Privacy legal professionals.
• Provide advice and guidance to Okta Security, Engineering, Product, executives, and other stakeholders on compliance with applicable data security and privacy laws and regulations, security/privacy by design, frameworks and industry certifications..
• Lead the legal response for the investigation of potential security incidents, determine legal and regulatory obligations, advise on necessary and recommended responses and provide guidance on mitigation, remediation and resolution efforts.
• Assist in the drafting and presentation of cybersecurity and privacy related materials, including to the Cyber Risk Committee.
• Develop and maintain cybersecurity and privacy legal processes and procedures, including programs and processes, policies, plans, procedures, playbooks and certification programs. 
• Provide early lifecycle stage advice on risk and innovations to speed development.
• Maintain a current understanding of technical controls and assist in the creation of mature audit and monitoring frameworks to support stable, controlled operations.
• Work cross functionally with Compliance, Legal Operations, Product, IP/AI, Litigation and other teams to ensure information security and privacy compliance. 
• Partner with cross functional teams to ensure necessary compliance in security and privacy terms in customer and vendor contracts. 
• Strategically manage outside counsel relationships, including staffing, strategy, work product, day-to-day activity and budgets. 

What you’ll bring to the role

• 12+ years of relevant experience as a practicing attorney, including 5+ years of experience specializing in global cybersecurity, privacy, and data protection matters. In-house experience at a multinational SaaS company is strongly preferred.
• Ability to translate complex global cybersecurity and privacy issues and ambiguity into clear and straightforward legal guidance, to communicate effectively with non-legal internal colleagues and support and inspire innovation across the business
• Expertise in global security, privacy and regulatory frameworks, including NIST, ISO, FedRAMP, PCI-DSS, GDPR, CCPA, CPRA and HIPAA.
• Ability to organize, prioritize and manage deadlines in a fast-paced and demanding work environment, while quickly issue spotting and appropriately prioritizing risk and possible outcomes.
• Demonstrated experience as a strong collaborator and communicator. 
• Familiarity and comfort with the culture of a fast-paced enterprise software company.
• A self-motivated individual with grit who takes initiative and is comfortable rolling up their sleeves. Team-oriented with a sense of humor and high emotional intelligence.
• JD from an accredited law school and be a member in good standing of at least one state Bar. 
• This position requires the ability to access federal environments and/or have access to protected federal data. As a condition of employment for this position, the successful candidate must be able to submit documentation establishing U.S. Person status (e.g. a U.S. Citizen, National, Lawful Permanent Resident, Refugee, or Asylee. 22 CFR 120.15) upon hire.

#LI-CM2

#LI-Remote

What you can look forward to as an Full-Time Okta employee!

• Amazing Benefits
• Making Social Impact
• Fostering Diversity, Equity, Inclusion and Belonging at Okta 

Okta cultivates a dynamic work environment, providing the best tools, technology and benefits to empower our employees to work productively in a setting that best and uniquely suits their needs. Each organization is unique in the degree of flexibility and mobility in which they work so that all employees are enabled to be their most creative and successful versions of themselves, regardless of where they live. Find your place at Okta today! https://www.okta.com/company/careers/.

Okta is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, ancestry, marital status, age, physical or mental disability, or status as a protected veteran. We also consider for employment qualified applicants with arrest and convictions records, consistent with applicable laws. If reasonable accommodation is needed to participate in the job application, interview process, or onboarding please use this Form to request an accommodation.

Okta is committed to complying with applicable data privacy and security laws and regulations. For more information, please see our Privacy Policy at https://www.okta.com/privacy-policy/.