Mid-level Data Privacy amp Cybersecurity Associate

Job Overview An established law firm is seeking a highly motivated and experienced Mid-Level Associate with 3–4 years of legal practice focused on Data Privacy and Cybersecurity. The successful candidate will advise a wide range of clients on global and U.S. data protection laws and will be involved in privacy compliance, regulatory counseling, contract drafting, incident response, and corporate transactions. This is a partner‑track opportunity designed for candidates with exceptional legal acumen, client service orientation, and an interest in working at the forefront of privacy and cybersecurity law. Location San Francisco, CA Responsibilities Counsel clients on U.S. and international data protection frameworks, including CCPA, GDPR, and other global privacy laws. Provide guidance on sector‑specific regulations (e.g., HIPAA, COPPA, GLBA, TCPA). Draft and revise privacy policies, terms of service, security policies, and incident response plans. Draft, negotiate, and review commercial contracts involving data sharing (e.g., DPAs, vendor agreements). Respond to regulatory inquiries and investigations related to data breaches and privacy compliance. Conduct privacy and cybersecurity due diligence for corporate transactions. Lead efforts related to data breach preparation, response, and risk mitigation. Advise on AI governance, including compliance with U.S. and EU regulations such as the EU AI Act. Requirements Minimum 3 years of experience providing legal counsel on data privacy and cybersecurity matters. Demonstrated expertise in regulatory compliance, contract negotiation, and risk management. Proven ability to manage complex legal issues with clarity and practical solutions. Exceptional written and verbal communication skills. Self‑motivated with a strong problem‑solving mindset. Ability to work collaboratively in a team‑oriented environment. Education Juris Doctor (JD) from an accredited law school. Strong academic credentials required. Certifications Admission to the California State Bar (in good standing). IAPP CIPP/US and/or CIPP/E certification strongly preferred. Skills Deep understanding of U.S. and international data privacy regulations. Strong legal research and drafting skills. Ability to navigate complex technical and regulatory environments. Familiarity with artificial intelligence regulatory issues. Client‑focused with the ability to tailor legal advice to specific business needs. Competence in advising across a variety of industries including tech, healthcare, and fintech. Benefits Discretionary performance bonus. Health insurance options, including HSA‑compatible plans. Dental, vision, and life insurance. Short‑ and long‑term disability insurance. Healthcare and dependent care Flexible Spending Accounts. 401(k) retirement plan. Paid vacation and sick leave. Employee assistance program. Additional voluntary benefits: accident, life, long‑term care, critical illness, and pet insurance. Commuter and transit benefit programs (market‑dependent). #J-18808-Ljbffr BCG Attorney Search