MetLife

Role Value Proposition: 

MetLife, through its subsidiaries and affiliates, is one of the world’s leading financial services companies, providing insurance, annuities, employee benefits and asset management to individual and institutional customers. We’re united by our purpose to help our customers and each other create a confident future; we’re guided by empathy; and we’re inspired by each other to make a difference in the lives of our coworkers, customers, communities, and the world at large. At MetLife, it’s #AllTogetherPossible. Join us!  

Legal Affairs - Building confident futures is at the center of all our work at MetLife. In Legal Affairs, that means empowering our trusted advisors and advocates to focus on what’s possible while safeguarding MetLife’s global interests. Collaborating with each other and our businesses around the globe, we support innovative solutions while protecting our customers, employees, communities, and shareholders. And we work in an environment founded on integrity, trust, candor, and respect, where new challenges and diverse perspectives are encouraged and celebrated.

MetLife is seeking an attorney with global cybersecurity legal experience to join our cyber legal team. The Senior Counsel position will assist in advising the Enterprise on navigating rapidly changing laws and regulations that govern our cybersecurity preparedness and response. Working closely and collaboratively with professionals across Legal Affairs, Global Security, Compliance, Risk, and Government Affairs, the attorney in this role will provide support to MetLife’s Global Security organization and be a point of contact for providing legal interpretation and guidance on cybersecurity laws and regulations across the Enterprise.

This role sits within the Section of the Law Department focused on Global Technology and Operations, Employment, Benefits and Information (GEBI).  This Section provides strategic legal advice across the enterprise on a wide variety of issues, including those associated with both the businesses and support functions of the enterprise.  Its members strive to provide actionable advice that considers commercial implications and to become trusted advisors to their business partners around the globe.

Key Responsibilities:

• Advise and support cyber incident response investigations, ensuring that the company complies with its regulatory notification obligations and that the investigation is carried out in a way that reduces litigation and regulatory risk.
• Provide cybersecurity legal advice and guidance on cybersecurity issues, including cyber incident response/preparedness, third-party risk management, risk assessment, internal and external audit requests, client/regulatory inquiries, new and existing technologies/offerings, business models and transactions (including mergers and acquisitions), and client-facing communications in the United States, Latin America, EMEA, and Asia.
• Respond to law enforcement and regulatory agencies regarding cybersecurity matters.
• Monitor the cyber legal and policy landscape for important updates and advise senior legal and business leaders on cybersecurity legal developments and policy trends.
• Assist with the development, application, and enforcement of information security policies, standards, and procedures to comply with regulatory obligations and contractual requirements.
• Manage the further development of a global cyberlegal team that coordinates across businesses and regions.
• Provide legal advice and strategic counsel on vulnerability management, application security, identity and access management, and other cybersecurity initiatives.
• Support the preparation of board reports, executive presentations, regulatory filings, and other legal disclosures to ensure accuracy and completeness of cybersecurity representations.
• Support the development and delivery of tabletop exercises and other cybersecurity education and awareness efforts.
• Establish and maintain strong relationships and lines of communication with business partners, legal personnel and other key stakeholders across the organization.

Essential Business Experience and Technical Skills:

Required:

• Minimum of six years of experience as legal counsel in either a law firm, a consulting firm, government, or as in-house counsel.
• Juris Doctorate degree and current member of a state bar in good standing.
• Material experience with cybersecurity and privacy law and general familiarity with cybersecurity standards, frameworks, risk assessments, and certification processes.
• Strong analytic and investigative skills with experience taking on complex projects.
• Team player with strong interpersonal skills and the ability to multi-task and prioritize.
• Strong communication and project management skills, including a strong desire and ability to make complex topics understandable for various audiences.
• Demonstrated capability for collaboration across diverse regions and populations.

Preferred:

• In-house legal experience in financial services, particularly in connection with supporting a technology or cybersecurity team.
• Experience with internal investigations, regulatory enforcement, law enforcement and/or national security matters relating to cybersecurity.

At MetLife, we’re leading the global transformation of an industry we’ve long defined. United in purpose, diverse in perspective, we’re dedicated to making a difference in the lives of our customers.