Incident Response Lead Counsel

Note : This employer is open to candidates who want to work remote. The Incident Response Counsel (Lead Counsel 2) is a senior level position responsible for providing Citi businesses and functions, including technology teams, with integrated legal support, advice, and guidance on privacy matters with a particular focus on incident response across Citi globally. The role will be under the supervision of the Global Privacy Legal Group Manager and will coordinate closely with the Cybersecurity Legal team and the broader Technology, Operations, & Privacy Legal Team.

This role requires a pragmatic, proactive attorney with thorough understanding of privacy and data protection, particularly in the context of a global regulated financial services institution, combined with a solid substantive, conceptual, and practical grounding in compliance with the applicable laws, rules and regulations for the geographies in which Citi operates. The role will provide input into strategic and operational decisions and exercise sound judgment to develop proactive and risk-appropriate, and business-focused solutions.

Responsibilities :

• Working with the Privacy Legal Team, Cybersecurity Legal Team, and business colleagues on reviewing and responding to potential data privacy incidents, including data privacy analysis within cybersecurity incidents, to ensure a consistent, efficient and effective approach across jurisdictions in compliance with applicable privacy and security standards, laws, rules and regulations.
• Collaborating with in-country, business and function Legal teams to drive high quality, consistent, compliant and efficient incident response advice globally.
• Working with the Privacy Legal Team and Cybersecurity Legal Team to support internal stakeholders on all aspects of incident prevention and response in data privacy events, including investigations, customer and regulatory notifications, contractual obligations, and legal risk mitigation.
• Developing, implementing and engaging in ongoing enhancements of Legal playbooks, checklists, decision trees, process flows, toolkits, template documentation (including notification letters) and training for members of the Legal teams engaged on privacy incidents to help drive high quality, accurate, efficient, well documented, consistent and actionable legal analysis and advice around privacy incidents globally.
• Reviewing facts, relevant laws, rules and regulations, and applicable legal analysis to ensure that consideration has been given to all appropriate factors in identifying and assessing the need to make, and the manner of making, individual, regulatory and / or contractual notifications concerning data privacy and / or information security events, and supporting stakeholders' implementation of Legal's recommendations.
• Supporting and using technologies and software to assist in the handling, analysis, documentation and resolution of incidents.
• Escalating matters, as appropriate, to support legal and compliance risk identification and mitigation and company requirements.
• Developing, and engaging in ongoing reviews of, metrics to help validate legal sufficiency, accuracy and consistency of recommendations and timeliness (e.g., trend analysis and lessons learned, and identifying any process improvements needed).
• Working with and supervising outside counsel, as needed.
• Assisting with other projects within the Technology, Operations & Privacy Legal team as requested and when time permits.

Qualifications :

Education :

Job Family Group : Legal

Job Family : Legal - Enterprise

Time Type : Full time

Primary Location :

Tampa Florida United States

Primary Location Full Time Salary Range :

$140,640.00 - $210,960.00

In addition to salary, Citi's offerings may also include, for eligible employees, discretionary and formulaic incentive and retention awards. Citi offers competitive employee benefits, including : medical, dental & vision coverage; 401(k); life, accident, and disability insurance; and wellness programs. Citi also offers paid time off packages, including planned time off (vacation), unplanned time off (sick leave), and paid holidays. For additional information regarding Citi employee benefits, please visit citibenefits.com. Available offerings may vary by jurisdiction, job level, and date of hire.

Most Relevant Skills

Please see the requirements listed above.

Other Relevant Skills

For complementary skills, please see above and / or contact the recruiter.

Anticipated Posting Close Date :

Sep 11, 2025

Citi is an equal opportunity employer, and qualified candidates will receive consideration without regard to their race, color, religion, sex, sexual orientation, gender identity, national origin, disability, status as a protected veteran, or any other characteristic protected by law.

If you are a person with a disability and need a reasonable accommodation to use our search tools and / or apply for a career opportunity review Accessibility at Citi.

View Citi's EEO Policy Statement and the Know Your Rights poster. Interested in working from home? This employer is open to candidates who want to work remote.

recblid ri0kyhzhfmj4m8xq0oghiwq8hhf3w8