A leading law firm seeks a mid-level associate with three to six years of experience to join its dynamic Data, Privacy & Cybersecurity practice in New York. The group advises clients at the intersection of data, technology, and law, serving the financial services, health care, life sciences, technology, and asset management sectors on complex, large-scale matters.

The role centers on privacy and cybersecurity compliance, incident response, and regulatory risk. Day to day, the associate advises on U.S. and international privacy regimes, drafts policies and processing agreements, coordinates breach responses, conducts risk assessments, and represents clients in data litigation and regulatory investigations.

Candidates should be comfortable handling nuanced, multi-layered legal issues in a fast-paced, deadline-driven environment and contributing to the development of junior colleagues.

JD from an accredited law school and admission to the New York State bar in good standing
3–6 years of relevant privacy and cybersecurity experience at a law firm, with a record of handling complex, large-scale matters
Experience interpreting and applying frameworks such as GDPR, CCPA, CPRA, and other global privacy laws
Hands-on data litigation experience, including discovery, motion practice, hearings, and breach investigation management
Responsible and ethical use of AI tools, including assessing appropriate use cases and exercising independent legal judgment
Strong legal writing, verbal communication, and analytical skills; ability to manage competing priorities

Apply for this role

Confidential. We never contact your current employer.