- Employment
- Full-Time
- Seniority
- Senior
- Department
- Legal & Compliance
- Posted
- Oct 17, 2026
About NetJets
Founded in 1964 and part of Berkshire Hathaway since 1998, NetJets is a leader in private aviation, renowned for pioneering fractional aircraft ownership. Serving a discerning international clientele, the company combines personalised service with a rigorous commitment to safety and operational excellence. As an employer, NetJets brings together pilots, maintenance specialists, operations professionals and client service teams, whose expertise underpins every journey. Its working environment places a premium on precision, discretion and collaboration, offering careers at the intersection of aviation and luxury service. For professionals drawn to exacting standards, NetJets represents an opportunity to contribute to a highly specialised, service-led business.
NetJets seeks a Senior Legal Counsel to advise on cybersecurity, privacy, data protection, and related regulatory compliance, serving as the lead legal advisor on information governance, cybersecurity risk, and incident response. The role partners across technology, security, compliance, HR, and business leadership, and requires at least 7 years of relevant legal experience, with a separate requirement stating 10+ years, plus a Juris Doctorate. Benefits include medical, dental, and vision coverage, paid time off, parental leave, and a 401(k) match.
Role & Responsibilities
- Serve as the primary legal advisor and subject matter expert on cybersecurity, data privacy, and data protection across the organization.
- Advise on applicable federal, state, and international privacy and data protection laws and regulations, including GDPR, CCPA/CPRA, and evolving privacy frameworks.
- Provide guidance on cybersecurity governance, risk management, regulatory compliance, and the development and implementation of information security policies and procedures.
- Partner with Cybersecurity, Information Technology, and business leadership on the legal aspects of cybersecurity incidents, including response, investigations, breach notifications, and regulatory reporting.
- Lead legal analysis and coordination of data breaches and other information security incidents with internal stakeholders and external counsel as appropriate.
- Review, draft, and negotiate privacy, data protection, cybersecurity, and information security terms in commercial agreements, including data processing agreements, vendor contracts, and technology agreements.
- Advise on third-party data protection risks, vendor security requirements, cross-border data transfers, and contractual obligations involving sensitive information.
- Advise on privacy-by-design, data governance and retention, and emerging technologies, including artificial intelligence and related data-use considerations.
- Monitor cybersecurity and privacy legislation, regulations, enforcement actions, and industry standards, assessing their potential impact on the organization.
- Support the development and enhancement of enterprise privacy and data protection policies, procedures, training, and compliance initiatives.
- Collaborate with internal stakeholders to assess and mitigate legal risks related to new technologies, products, services, and business initiatives.
- Manage outside counsel and other external legal resources as necessary.
- Provide practical, business-oriented legal advice to senior leadership and cross-functional stakeholders.
- Support other corporate legal matters and special projects as assigned.
Qualifications
- Minimum of 7 years of relevant legal experience, preferably combining law firm and in-house corporate experience; a separate experience requirement also states 10+ years.
- Substantial experience advising on cybersecurity, data privacy, data protection, and related regulatory compliance matters.
- Demonstrated knowledge of U.S. privacy and data protection laws, including state comprehensive privacy laws, data breach notification requirements, and applicable federal regulations.
- Experience advising on cybersecurity incidents, regulatory obligations, and incident response processes.
- Experience drafting and negotiating technology agreements, data processing agreements, and contractual provisions relating to information security and data protection.
- Strong analytical, communication, negotiation, and problem-solving skills.
- Ability to provide practical legal guidance in a complex, fast-paced business environment.
- Preferred: Experience advising multinational organizations on international privacy requirements, including GDPR and cross-border data transfers.
- Preferred: Experience working directly with cybersecurity, information security, and technology leadership.
- Preferred: Familiarity with cybersecurity and privacy frameworks, including NIST, ISO 27001, and related industry standards.
- Preferred: Experience in a highly regulated industry, such as aviation, transportation, financial services, or technology.
- Preferred: Relevant privacy or cybersecurity certifications, such as CIPP/US, CIPP/E, or CIPM.
- Ability to independently manage complex legal matters and provide sound, risk-based recommendations.
- Strong understanding of the intersection between cybersecurity, privacy regulation, technology, and enterprise risk management.
- Ability to translate complex legal and regulatory requirements into actionable guidance for technical and nontechnical stakeholders.
- Excellent judgment, discretion, and ability to handle sensitive and confidential information.
- Strong interpersonal skills and ability to build effective partnerships across business functions.
- Ability to balance legal risk mitigation with business objectives.
- Demonstrated ability to manage multiple priorities and work effectively with senior leadership.
Skills
Experience
At least 7 years of relevant legal experience, preferably combining law firm and in-house corporate experience; a separate experience requirement states 10+ years.
Education
Juris Doctorate
Benefits
Medical, dental, and vision benefits, including no-cost options; healthcare advocacy; Employee Assistance Program; Flexible Spending Accounts; Health Savings Account with annual employer contribution; wellness programs and discounts; paid time off; parental leave; life and accident insurance; voluntary financial protection plans; 401(k) with a 67% match on standard elective deferral and catch-up contributions (super catch-up contributions are not eligible); short- and long-term disability; legal plan; identity theft protection plans; pet insurance; family and caregiving support.
Culture
NetJets’ workplace culture is shaped by the exacting demands of private aviation, with safety, operational precision and discreet, personalised service at its core. Its environment calls for close collaboration among flight crews, operations teams and client-facing professionals, combining technical expertise with the responsiveness expected by a discerning international clientele.
About Cerulean
Cerulean is the definitive career portal for the global luxury industry. We match exceptional professionals with exclusive opportunities at the world's most prestigious brands. From haute couture and fine watchmaking to prestige beauty, hospitality, and boutique retail, Cerulean centralises luxury employment to help you find the career for which you were destined.
Frequently Asked Questions
The luxury industry is characterised by a diverse and nuanced nomenclature. Esteemed houses frequently employ proprietary terminology, and even within a single organisation like NetJets, titles may vary across global markets to reflect local conventions. To ensure absolute clarity, Cerulean assigns a standardised, industry-coherent canonical title to every listing. However, it is worth noting that this role is functionally synonymous with «Senior Legal Counsel», «Senior Privacy Counsel», «Senior Cybersecurity Counsel», «Senior Data Protection Counsel», and other variations. Our sophisticated search architecture anticipates these variations, ensuring that inquiries using related terms will seamlessly yield the exact roles you desire.
