New York State - Department of Financial Services
Description
The New York State Department of Financial Services seeks to build an equitable, transparent, and resilient financial system that benefits individuals and supports business. Through engagement, data-driven regulation and policy, and operational excellence, the Department and its employees are responsible for empowering consumers and protecting them from financial harm; ensuring the health of the entities we regulate; driving economic growth in New York through responsible innovation; and preserving the stability of the global financial system.
Under the direction of the agency’s Executive Deputy Superintendent for Cybersecurity, the Deputy Superintendent for Cybersecurity Law & Policy will provide expertise and leadership in support of the Department’s mission to protect consumers and industry by leading the Division’s Cybersecurity Law & Policy Unit of DFS’s Cybersecurity Division.
This role will support interpretation and enforcement of the Cybersecurity Regulation (Part 500)
will include, but are not limited to:
• Leads and manages a team of attorneys and staff in the Cybersecurity Law and Policy Unit;
• Leads the development and implementation of policy initiatives to promote compliance with Part 500;
• Drafts and contributes to cybersecurity guidance, alerts, and advisories for DFS-related entities;
• Facilitates external educational seminars and other speaking engagements with trade associations and other stakeholders regarding Part 500, the Cybersecurity Division, and the work of the Department;
• Oversees and performs legal research and analysis related to legal and policy recommendations;
• Assists with and participates in, as needed, cybersecurity-related incident investigations, enforcement actions, and drafting and negotiating agreements with regulated entities;
• Oversees revisions to Part 500 and the regulatory amendment process, as needed;
• Develops, implements, and maintains policies and procedures for the Cybersecurity Law & Policy Unit and the Cybersecurity Division;
• Coordinates with the Department’s Office of General Counsel and other Department staff; and
• Other duties as assigned
Preferred Qualifications
• Admission to a state bar, in good standing, for at least 14 years, and admission to the New York State bar within one (1) year of selection for this position.
• At least 8 years of specialized experience in one or more of the following fields:
o Cybersecurity and/or Privacy Law
o Regulatory compliance, and/or
o Investigations and regulatory enforcement.
• Excellent communication and interpersonal skills.
• Ability to write clearly on complex issues.
• Knowledge of cybersecurity and information technology concepts.
Appointment Method:
This is an appointment to a position in the exempt jurisdictional class. As such, the incumbent of this position would serve at the pleasure of the appointing authority.

