Assistant Attorney 1/ Assistant Attorney 2/ Assistant Attorney 3 / Senior Attorney (NY HELPS)

NYSIF
New York, NY 10007
Category Legal
Job Description

• Operationalize Privacy Procedures: Build out or execute privacy, artificial intelligence and security workflows across internal business units.
• Privacy & Security Impact Analyses: Perform and document Privacy Impact Assessments (PIAs) and Data Protection Impact Assessments (DPIAs) for projects impacting sensitive NYIF data.
• CISO/CPO Operational Support: Assist the CISO/CPO in updating internal security frameworks, privacy notices, and AI governance procedures to align with organizational risk thresholds.
• Incident Response & Documentation: Support the security team during incident response workflows, helping to assess data incident thresholds and evaluate regulatory notification triggers.
• Represents the Information Security and Data Privacy office at internal and external information security meetings and conferences to maintain awareness and evaluates the applicability of the latest information security techniques and tools to the agency’s security program.
• Regulatory Tracking: Monitor and interpret evolving state and federal insurance-specific privacy regulations (e.g., NAIC models, GLBA), cybersecurity rules, and emerging AI mandates.
• Cross-Functional Enablement: Develop into the primary privacy program liaison to internal business stakeholders, translating technical security and privacy requirements into clear, actionable business guidance.
• Participate in the continuous monitoring and protection of third party-vendor resources and determines events that require investigation and response.