Red hat Corporate Attorney – Product Information Security 

Germany, Bavaria, Munich 

225757817

What you will do:

• Act as subject matter expert supporting the Commercial Legal team in complex contractual negotiations related to security obligations, focusing in particular on customers in regulated sectors such as financial services and telecommunications;

• Serve as a security subject matter expert on security laws and regulations, advising on responses to customer security questions and requests;

• Provide legal advice and support related to compliance with the EU Cyber Resilience Act, NIS2 Directive and other regulations applicable to Red Hat’s offerings;

• Provide legal guidance during security incidents, including on compliance with breach notification processes and responses to regulatory inquiries;

• Review security advisories and updates, related press releases, and certification and attestation communications;

• Work closely with Red Hat’s Public Policy team to monitor and evaluate emerging legislative and policy initiatives in this area;

• Work closely with the Product Security, Information Security, and Data Protection & AI teams on a range of matters impacted Red Hat’s business;

• Create, maintain, and provide security-related awareness training, contract templates, playbooks, and governance documents;

• Participate in periodic internal and external audits, reviews, and assessments of Red Hat’s offerings and controls and implement appropriate risk mitigations and lessons learned; and

• Promote the importance of a solid culture of security.

What you will bring:

• Fully qualified to practice law and in good standing in preferably Germany, England or Ireland;

• 3+ years of product or information security experience in a law firm, government entity, or in-house team;

• Experience supporting the development of cloud applications and related software offerings are a plus;

• English and another European language, preferably French, German, Italian or Spanish;

• Experience negotiating security obligations in customer and vendor agreements;

• Good analytical abilities to quickly understand complex cybersecurity concepts and regulatory requirements and support the development and appropriate communication of security bulletins, remedial measures, and controls;

• Demonstrated ability to establish and maintain appropriate working relationships with all levels of an organization and external contacts, and to work effectively in a professional team environment;

• Excellent writing and interpersonal skills, sound judgment, and ability to inspire and collaborate with others in a growing global business; and

• Proactive approach to recognizing business and compliance needs, anticipating issues, and applying thorough and thoughtful analysis with exceptional sense of judgment in determining recommended steps and actions relative to product and information security matters.