In-House Privacy & Info Security Counsel

State Farm seeks an In-House Privacy & Info Security Counsel to lead legal guidance on data protection across our insurance and financial services. In this hybrid role, you'll advise on HIPAA, GLBA, state privacy laws, and cybersecurity requirements, shaping policies, contracts, and incident response. You'll partner with InfoSec, IT, and business leaders to embed privacy-by-design, manage breach risk, and support audits and regulator inquiries, while contributing to an inclusive culture focused on integrity, community, and professional growth.

Responsibilities

• Provide legal counsel on data privacy, cybersecurity, and information governance for insurance and financial products
• Draft, review, and negotiate privacy and security terms in vendor and partner contracts
• Advise on compliance with HIPAA, GLBA, state privacy laws, and global data protection regulations
• Partner with Info
• Sec, IT, and product teams to embed privacy-by-design and security controls
• Lead incident response legal support, including breach assessment, notifications, and remediation guidance
• Develop and update privacy policies, notices, and data handling standards
• Conduct training for business partners on privacy, cybersecurity, and regulatory requirements
• Monitor emerging privacy and security regulations and advise leadership on risk and strategy
• Support audits, assessments, and regulator or customer inquiries related to data protection
• Collaborate with cross-functional teams to balance innovation, customer experience, and compliance

Required Skills

• Data privacy law
• Information security law
• Regulatory compliance (HIPAA, GLBA, state privacy laws)
• Contract drafting and negotiation
• Incident response and breach management
• Risk assessment and mitigation
• Policy development and governance
• Legal research and writing
• Stakeholder and cross-functional collaboration
• Training and presentations