Our client, a leading global law firm, is expanding its cross-border Cyber/Data/Privacy practice and seeks a mid-level associate (4th–7th year) to join its team in one of several US offices (New York, San Francisco, Seattle, or Washington, DC). The practice advises a diverse client base—from emerging and public companies to technology, financial, life sciences, and national media organizations—on the full spectrum of data privacy and security issues.

Provide counseling and advisory support on compliance with CCPA, CPRA, GDPR, and other privacy laws.
Conduct privacy and information security due diligence for corporate and technology transactions.
Draft and negotiate data processing agreements and privacy schedules in commercial deals.
Support incident preparedness, data breach response, and incident response planning.
Assist with state and federal investigations and related proceedings.

Ideal candidates will have 4–7 years of experience in a law firm or in-house role handling cyber/data/privacy compliance and advisory matters. A strong academic record from a nationally recognized law school is required, along with excellent analytical, writing, and client-facing skills.

4–7 years of experience advising on cyber, data, and privacy compliance (law firm or in-house).
In-depth knowledge of CCPA, CPRA, GDPR, and other privacy regimes.
Experience with privacy due diligence, data processing agreements, and commercial contract privacy terms.
Familiarity with incident response and data breach preparedness.
High academic achievement and exceptional analytical, writing, and communication skills.

Apply for this role

Confidential. We never contact your current employer.