Cybersecurity and Data Protection Associate General Counsel

Responsibilities

• Provide legal guidance on Booz Allen's cybersecurity program, counseling on compliance with regulatory requirements and frameworks such as NIST, CMMC, FedRAMP, FAR, and DFARS, and advising on secure cloud deployments and governance.
• Collaborate with Enterprise Cybersecurity to assess controls and governance frameworks, including identity and access management, logging and monitoring, endpoint protection, and vulnerability management.
• Advise on incident response processes, standards, and playbooks; serve as the legal advisor for incident response, coordinating with investigations, reporting, and remediation efforts.
• Counsel on cybersecurity requirements for third party service providers, vendor oversight, and technical integrations.
• Provide guidance on cybersecurity considerations for client-facing solutions, products, and go-to-market activities.
• Educate internal stakeholders on cybersecurity legal and compliance risks, regulatory expectations, and best practices.

Requirements

• 7+ years of experience with a law firm or in-house focus on cybersecurity, compliance, cloud, incident response, or data protection.
• Experience advising on NIST, CMMC, FedRAMP, FAR, or DFARS frameworks and requirements.
• Experience supporting cybersecurity compliance programs, audits, assessments, or remediation efforts.
• Experience advising on incident response, investigations, and reporting obligations.
• Experience counseling on cloud security and technology deployments.
• Ability to manage multiple priorities in a fast-paced environment.
• Ability to translate complex legal requirements into practical business guidance.
• J.D. degree.

Technologies

• NIST
• CMMC
• FedRAMP
• FAR
• DFARS

Benefits

• Health benefits
• Life benefits
• Disability benefits
• Financial benefits
• Retirement benefits
• Paid leave
• Professional development
• Tuition assistance
• Work-life programs
• Dependent care

Nice If You Have

• Experience with federal government contracts
• Experience with cloud governance or secure system deployment in regulated environments
• Experience with privacy, data governance, AI governance, or crisis management
• Experience supporting market-facing technology or product teams
• Experience working with engineers, security teams, architects, or developers

Compensation

• Salary is determined by location, education, knowledge, skills, competencies, experience, contract affordability, and organizational requirements.
• Projected compensation range for this position is $162,800.00 to $303,000.00 USD annually; this range is typical for Booz Allen’s total compensation package.
• This posting will close within 90 days from the posting date.

Identity Statement

• As part of the hiring process, you may be asked to complete an identity verification process using advanced biometrics and artificial intelligence to ensure authenticity and prevent identity fraud. Interviews and assessments may require on-camera participation, and Booz Allen may capture a photo to verify identity.

Candidate AI Usage Policy

AI is part of Booz Allen's daily operations, and the company supports responsible use of AI tools while maintaining a fair candidate process based on your own skills and knowledge. The use of AI or other tools to assist with interview responses is prohibited unless explicit permission is provided.

Work Model

• Remote: Roles labeled remote may require occasional in-person work at Booz Allen or customer facilities.
• Hybrid: Roles labeled hybrid require frequent work from a Booz Allen facility and may involve visits to customer facilities.
• Onsite: Roles labeled onsite are performed primarily at a Booz Allen office or customer facility, with in-person collaboration as needed.

Commitment to Non-Discrimination

All qualified applicants will receive consideration for employment without regard to disability, protected veteran status, or any other status protected by applicable law.