Data Privacy and Cybersecurity Associate

Profile

Job Overview

A law firm seeks an associate with 3-6 years of experience in data privacy and cybersecurity to join its growing team in Boston, MA. The ideal candidate will advise clients on privacy compliance, cybersecurity incident response, data governance, and related regulatory matters.

Duties

• Advise clients on privacy compliance, including U.S. state privacy laws, GDPR, global privacy issues, and federal laws such as GLBA and HIPAA.
• Draft, review, and negotiate privacy policies, data processing agreements, and related privacy documentation.
• Advise clients on the use of cookies and other tracking or data collection technologies.
• Manage cybersecurity and incident response matters, including breach response, ransomware/extortion events, and engagement with regulators and state attorneys general.
• Support time-sensitive cybersecurity incident response matters, including those requiring availability outside regular business hours.

Requirements

• 3-6 years of experience in data privacy and cybersecurity.
• Excellent drafting, written, and verbal communication skills.
• Strong legal research, analytical, and technical skills.
• Proven ability to manage complex matters with a high degree of accuracy, organization, and attention to detail.
• Ability to work both independently and collaboratively in a team environment.
• Admission to the bar in the jurisdiction where the candidate will be resident, and in good standing, is required.

Education

• Law degree from an accredited institution.

Certifications

• Active bar admission in the relevant jurisdiction.

Skills

• Experience with data governance and information risk, including retention, records, vendor risk, data transfers, and regulatory risk assessments.
• Experience with privacy and cybersecurity due diligence, including buy-side and sell-side diligence, data transfer reviews, and investment privacy and security diligence.
• Experience with regulatory investigation counseling, including representing clients in non-litigation administrative matters before the FTC, HHS, state attorneys general, and in connection with data privacy-related demands and interactions with law enforcement.

Benefits

• Hybrid work environment allowing attorneys to work remotely two days per week.
• Comprehensive benefits package including medical, dental, vision, life, and disability insurance.
• 401(k) retirement plan.
• Paid time off, subject to the terms and eligibility requirements of the Firm's benefit plans.
• Discretionary year-end merit bonus in accordance with the Firm's applicable bonus program.

Company info

BCG Attorney Search
225 Franklin Street, 26th floor
Boston
Massachusetts
United States 02110
Phone : (857) 277-7381
Fax : (213) 895-7306