Data Privacy and Cybersecurity Associate (Mid-level)

Data Privacy and Cybersecurity Associate (Mid-level)

Direct Counsel is partnered with a leading global law firm seeking a 3rd to 5th year Associate to join their Privacy & Cybersecurity Practice Area in any one of their U.S. offices. The position offers front-line responsibility to advise clients on a range of US-focused privacy and other data-related compliance counseling. This will largely involve working one-on-one with supervising partners but may on occasion involve supervision of paralegals and more junior lawyers.

Responsibilities:

• Leading projects and direct interface with clients.
• Conducting compliance gap assessments.
• Drafting policies, procedures, and guidance (privacy policies, business-facing guidance, DSR procedures, incident response plans and tabletop exercises, contracting templates and playbooks, data sale/sharing/targeted advertising advice, etc.).
• Contracting and playbook development; assisting clients with determining priorities, risks, and implementation of compliance programs.

Requirements:

• 3-5 years of practical data privacy counseling experience. Candidates whose practice has been focused on incident response, M&A diligence, or cybersecurity will not be considered.
• Specific experience providing practical advice and implementing state privacy laws (such as CCPA, WA MHMD, and other equivalent state privacy laws) is required.
• Experience with the financial and health/life sciences sectors, including specific experience with GLBA, CalFIPA, FCRA, insurance privacy, FTC/CFPB rules (such as Reg P and Safeguards Rule), HIPAA, 42 CFR Part 2, and state health privacy laws is strongly preferred.
• Excellent organizational skills and attention to detail, along with strong verbal and written communication abilities.
• A self-starter with the ability to prioritize workload with competing demands, display good judgment, work well under pressure, and frame advice/analysis practically based on risks.
• Must be capable of working (and enjoy working) in a collaborative, congenial environment.
• Proven ability to independently manage matters, or meaningful segments of large/complex matters, and to facilitate pushing projects to completion.
• Candidates with large law firm experience only (boutique specialists may be considered as well).
• Certified Information Privacy Professionals are preferred but not mandatory, including the following certifications: CIPP-US, CIPT, and CIPM.
• Must be admitted to practice in the jurisdiction in which you are applying.

Compensation and Benefits:

Salary range is based on Year of JD Class starting at $235,000 per year for 2022 graduates. Comprehensive benefits available including Medical, Dental, Vision, and paid time off.