Data Privacy and Cybersecurity Associate (Mid-level)

Direct Counsel is partnered with a leading global law firm seeking a 3rd to 5th year Associate to join their Privacy & Cybersecurity Practice Area in any one of their U.S. offices. The position offers front-line, responsibility to advise clients on a range of US-focused privacy and other “data”-related compliance counseling. will largely involve working one-on-one with supervising partners but may on occasion involve supervision of paralegals and more junior lawyers. 

Responsibilities:  

• Leading projects and direct interface with clients
• Compliance gap assessments.
• developing comprehensive compliance programs
• drafting policies, procedures, and guidance (privacy policies, business-facing guidance, DSR procedures, incident response plans and tabletop exercises, contracting templates and playbooks, data sale/sharing/targeted advertising advice, etc.)
• Contracting and playbook development; and assisting clients with determining priorities, risks, and implementation of compliance programs. 

Requirements:

·         3-5 years of practical data privacy counseling experience. At this time, they are not looking for candidates whose practice has been focused on incident response, M&A diligence, or cybersecurity. 

·         Specific experience providing practical advice and implementing state privacy laws (such as CCPA, WA MHMD, and other equivalent state privacy laws) is required.

·         Specific experience with AdTech and cookies/online trackers, including TCPA, CANSPAM, DAA/NAI/IAB self-regulatory rules, etc. is strongly preferred.

·         Specific experience with the financial and health/life sciences sectors, including specific experience with GLBA, CalFIPA, FCRA, insurance privacy, FTC/CFPB rules (such as Reg P and Safeguards Rule), HIPAA, 42 CFR Part 2, and state health privacy laws is strongly preferred.

·         Excellent organizational skills and attention to detail are necessary as well as strong verbal and written communication abilities. 

·         A self-starter with the ability to prioritize workload with competing demands, display good judgment, work well under pressure, and frame advice/analysis practically based on risks. 

·         Must be capable of working (and frankly enjoy working) in a collaborative, congenial environment. 

·         Proven ability to independently manage matters, or meaningful segments of large/complex matters, and to facilitate pushing projects to completion.

·         Candidates with large law firm experience only (boutique specialists may be considered as well)

·         Certified Information Privacy Professionals are preferred but not mandatory, including the following certifications: CIPP-US, CIPT, and CIPM

·         Must be admitted to practice in the jurisdiction in which you are applying

Compensation and Benefits:

Salary range is based on Year of JD Class starting at $235,000 per year for 2022 graduates

Comprehensive benefits available including Medical, Dental, Vision and paid time off