Data Privacy and Data Security Attorney

Our client, a highly regarded law firm, is seeking a Data Privacy & Cybersecurity Associate Attorney with 2-4 years of experience to join its growing Privacy, Cybersecurity, and Technology practice. This is an excellent opportunity for an attorney looking to work on sophisticated privacy, data security, incident response, and technology-related matters for a diverse client base.

Key Responsibilities

• Advise clients on a broad range of data privacy, cybersecurity, and information governance matters.
• Manage and support data breach and cybersecurity incident response engagements, including incident triage, containment strategies, risk assessments, notification obligations, and regulatory compliance requirements.
• Assist clients with incident investigations, regulatory examinations, and responses to inquiries from administrative, regulatory, and legislative bodies.
• Draft, review, and update privacy policies, information security policies, privacy management programs, and related compliance documentation.
• Counsel clients on state, federal, and industry-specific privacy and data protection regulations.
• Review, negotiate, and draft commercial agreements, including Master Service Agreements (MSAs), SaaS agreements, software licensing agreements, data processing addenda (DPAs), and other technology and data-related contracts.
• Evaluate vendor management frameworks and conduct privacy and cybersecurity risk assessments related to third-party service providers, software vendors, and outsourcing arrangements.
• Provide legal research, analysis, and practical guidance on emerging privacy, cybersecurity, and technology issues.
• Collaborate with partners and clients on complex cross-functional matters involving privacy, data security, regulatory compliance, and commercial transactions.

Qualifications

• J.D. from an accredited law school with strong academic credentials.
• Active bar admission in good standing.
• 2-4 years of experience handling data privacy, cybersecurity, data breach response, and related regulatory matters.
• Demonstrated experience managing cybersecurity incidents, data breach investigations, and compliance-driven response efforts.
• Experience drafting and reviewing privacy policies, security frameworks, and compliance documentation.
• Strong background reviewing and negotiating technology, SaaS, software licensing, and data-related commercial agreements.
• Familiarity with vendor risk management, third-party risk assessments, and privacy compliance programs.
• Exceptional legal research, analytical, writing, and communication skills.
• Strong client-service orientation and the ability to manage multiple matters in a fast-paced environment.
• CIPP/US, CIPP/E, CIPM, or other privacy-related certifications are highly preferred.