Senior Corporate Counsel - Information & Product Security

San Mateo, CA, United States

Why PlayStation?

PlayStation isn’t just the Best Place to Play — it’s also the Best Place to Work. Today, we’re recognized as a global leader in entertainment producing The PlayStation family of products and services including PlayStation®5, PlayStation®4, PlayStation®VR, PlayStation®Plus, acclaimed PlayStation software titles from PlayStation Studios, and more.

PlayStation also strives to create an inclusive environment that empowers employees and embraces diversity. We welcome and encourage everyone who has a passion and curiosity for innovation, technology, and play to explore our open positions and join our growing global team.

The PlayStation brand falls under Sony Interactive Entertainment, a wholly-owned subsidiary of Sony Corporation.

Senior Corporate Counsel - Information & Product Security

San Mateo, Los Angeles, or San Diego (hybrid) - will require weekly onsite work*

As a Senior Corporate Counsel passionate about Information and Product Security, you will play a vital role in ensuring the legal compliance and protection of our company's sensitive information, intellectual property, customer data, as well as our products & services. As SIE’s primary cybersecurity attorney, your role involves offering legal guidance and support to our Information Security team, who lead all aspects of cybersecurity functions across SIE’s diverse range of offerings. You will also collaborate closely with other legal, technology, and business units to ensure the implementation of robust security measures and risk mitigation strategies.

Responsibilities:

Legal Compliance: Stay abreast of relevant laws, regulations, and industry standards related to information security and cybersecurity. Advise and support the company in developing and implementing policies and procedures to align with these legal requirements.

Support Corporate Information Security: Lead legal support for all of SIE’s corporate information technologies on cybersecurity matters.

Support Product, Service and Network Security: Lead legal support for SIE’s products (e.g., PlayStation 5), services (e.g., PlayStation Plus), and PlayStation Network on cybersecurity matters.

Incident Responses: Work closely with the Incident Response team to manage and coordinate legal aspects of any cybersecurity incidents or breaches. Provide mentorship on notification requirements, regulatory compliance, and potential legal actions. Collaborate with Information Security leaders and key stakeholders to improve continually SIE’s incident response processes and procedures.

Risk Assessment and Mitigation: Assess legal risks associated with information security and cybersecurity practices and develop strategies to mitigate potential liabilities. Offer legal guidance on risk management and incident prevention.

Contracts and Agreements: Review, draft, and negotiate contracts with clients, vendors, and partners related to information security and cybersecurity matters, ensuring the protection of our company's interests, and maintaining compliance with applicable laws and regulations.

Support SIE’s Bug Bounty Program: Provide legal support to the operation of SIE’s program to review and remediate reported security vulnerabilities in SIE’s products and services.

Data Privacy: Collaborate with the Privacy team to ensure alignment between information security and privacy practices. Provide legal counsel on data protection and privacy laws to ensure the appropriate handling and safeguarding of personal and sensitive data.

Regulatory Compliance: Monitor and interpret information security and cybersecurity regulations, and other relevant laws. Develop and implement compliance programs to ensure adherence to these regulations.

Training & Education: Conduct training sessions and workshops for employees on legal aspects of information security and cybersecurity. Promote a culture of security awareness throughout the organization.

Litigation Support: Provide legal support in any information security or cybersecurity-related litigation, including drafting responses, working with external counsel, and representing the company's interests.

Qualifications:

Juris Doctor (J.D.) degree from an accredited law school and admission to the bar in the relevant jurisdiction.

Minimum of 12 years of overall experience practicing law and 6 years of experience as an attorney with a focus on information security, cybersecurity, and data privacy matters in a technology-related company or law firm.

Proven understanding of information security and cybersecurity laws, regulations, and industry standards.

Shown experience in negotiating sophisticated contracts and agreements related to information security and cybersecurity.

Familiarity with data protection laws, including GDPR, CCPA, and HIPAA.

Experience in incident response, risk management, and regulatory compliance in the cybersecurity domain.

Excellent communication and interpersonal skills, with the ability to work collaboratively with cross-functional teams.

Confirmed ability to provide clear and practical legal advice to non-legal partners.

Strong analytical and problem-solving skills, with a keen attention to detail.

CISSP, CIPP, or other relevant certifications are a plus.

*PlayStation offers a global hybrid office/remote working model — Flex Modes — which aims to combine the flexibility of remote working with the magic of in-person collaboration. The model is built upon the principle of working together in-person as work requires, with the freedom to work remotely otherwise.

#LI-SF1

#LI-HYBRID

Please refer to our Candidate Privacy Notice for more information about how we process your personal information, and your data protection rights.

At SIE, we consider several factors when setting each role’s base pay range, including the competitive benchmarking data for the market and geographic location.

Please note that the base pay range may vary in line with our hybrid working policy and individual base pay will be determined based on job-related factors which may include knowledge, skills, experience, and location.

In addition, this role is eligible for SIE’s top-tier benefits package that includes medical, dental, vision, matching 401(k), paid time off, wellness program and coveted employee discounts for Sony products. This role also may be eligible for a bonus package. Click here to learn more.

The estimated base pay range for this role is listed below.

$214,500 — $321,700 USD

Equal Opportunity Statement:

Sony is an Equal Opportunity Employer. All persons will receive consideration for employment without regard to gender (including gender identity, gender expression and gender reassignment), race (including colour, nationality, ethnic or national origin), religion or belief, marital or civil partnership status, disability, age, sexual orientation, pregnancy or maternity, trade union membership or membership in any other legally protected category.

We strive to create an inclusive environment, empower employees and embrace diversity. We encourage everyone to respond.

PlayStation is a Fair Chance employer and qualified applicants with arrest and conviction records will be considered for employment.

#J-18808-Ljbffr