Assistant General Counsel - Data Regulation, Privacy, Security & Governance

Cooley LLP

San Francisco (CA)

Hybrid

USD 240,000 - 300,000

Full time

4 days ago

Be an early applicant

Application generator

Don’t send a generic resume — generate a resume and cover letter tailored to this exact role.

Get past ATS filters

Benefits offered by this job

Medical

Health savings account

Dental

Vision

Commuter benefits

Life insurance

Parental leave

Vacation days

Job summary

Cooley LLP is seeking an Assistant General Counsel to join the General Counsel's Office in a hybrid SF-based role focusing on data regulation, privacy, security and governance. You will shape policy, advise on cross-border data flows, and manage vendor and client data processing agreements to minimize risk while enabling business aims.

The role requires strong privacy law expertise, 6+ years in the field, and a deep understanding of GDPR and CPRA/CCPA, with collaboration across technology,

Qualifications

J.D. from ABA-accredited law school required.
Active bar membership in relevant jurisdiction and Cooley office.
6+ years of experience advising on data privacy and governance.
Experience with U.S. export control regulations.
Experience drafting and negotiating data processing/transfer agreements.
Strong business acumen and risk management ability.

Responsibilities

Advise on data regulation and governance, privacy, data security, and retention across firm operations.
Draft and update privacy and data governance policies.
Collaborate with Data Protection Officer, GC Office and stakeholders on compliance.
Draft/negotiates data processing agreements and security addenda.
Coordinate privacy compliance with GDPR, CCPA/CPRA, and other regimes.

Skills

Data privacy

Data governance

Export controls

Contracting

Regulatory compliance

Cross-functional collab

Microsoft Office

iManage

Education

J.D. from ABA-accredited law school

Active law license

Job description

Assistant General Counsel - Data Regulation, Privacy, Security & Governance

Cooley is seeking an Assistant General Counsel to join the General Counsel's Office.

About Cooley

Cooley is a global law firm with an expansive practice and more than 3,000 employees and partners worldwide. We value and celebrate diverse perspectives and strive to create a workplace where every individual can thrive. At the core of Cooley’s success is the exceptional talent and unwavering spirit of our people. We embrace individuality while fostering a ‘one-firm’ culture where collaboration and creativity thrive. Our people are the foundation of our success and the driving force behind everything we do.

Hybrid Schedule Philosophy

As part of the Cooley culture, we recognize and appreciate the value of being together, in person, to build comradery with others in the office and to be a contributing member of the Cooley office. However, we also appreciate the benefits and flexibility that come from remote working. As such, the default assumption for employees and partners is a hybrid schedule: some in-office presence and some work from home days.

Position summary

Guided by department objectives and priorities, the Assistant General Counsel - Data Regulation, privacy, data security, data governance and data protection develops, leads, and maintains the firm’s legal strategy for data regulation, privacy, data security, data governance and data protection. The Assistant General Counsel will ensure appropriate use of data use and sharing; export controls, vendor and client data processing arrangements; and emerging regulatory frameworks and compliance with privacy regulations. The role will prepare, implement, review, and update data-related and privacy-related policies and procedures; advise on compliance with U.S. state and federal privacy laws and global regimes (including GDPR and CCPA/CPRA); guide readiness for evolving data rules such as those governing bulk data, export controls and similar regulated data flows; and collaborate closely with the Office of the General Counsel, including the Client Engagement Counsel, the firm’s Data Protection Officer, Technology, Innovation and other stakeholders. The Assistant General Counsel demonstrates strong business acumen, applied legal expertise, and global privacy fluency to support time-sensitive outcomes that align with firm strategy and risk posture.

Position responsibilities

Advise the firm, in coordination with relevant stakeholders from Security, Technology, Innovation and other lawyers in the Office of the General Counsel, on data regulation and governance issues spanning privacy, data security, records retention and disposition as they relate to compliance with data laws, data inventories and maps, cross-border transfers, data subject requests, and lawful data use across firm operations and client interactions.

Work closely with Chief Security & Technology Officer and Chief Innovation Officer on evaluating technology vendor data privacy.

Prepare and update firm privacy and data governance policies and procedures to comply with applicable regulations, including GDPR and U.S. state privacy laws such as CCPA/CPRA, and maintain public-facing notices that reflect current legal and firm practices.

Provide privacy input on business projects and initiatives as requested by the firm’s Data Protection Officer and/or the Office of the General Counsel.

Assist with continuing improvements to a sustainable governance framework for client and firm data, including policy development for client file handling and retention, oversight of records and information management as they relate to compliance with applicable data laws and regulations, and integration with information security and data governance functions.

Support incident preparedness and response for privacy and data security events, including investigation, containment, remediation, notifications where required, and post-incident improvement in collaboration with the Chief Security & Technology Officer and firm leadership, as needed.

Act as cyber security subject matter expert in close collaboration with cyber security tech team.

Assist with drafting, reviewing, and negotiating data-related terms in client and vendor contracts, including data processing and transfer agreements, privacy-related clauses and security addenda, applying advanced knowledge of global privacy regulations and contracting practices to manage risk and drive successful outcomes.

Ensure key contracts, firm procurement initiatives and sourcing strategies are aligned with the overall priorities of the firm’s legal function, paying special attention to privacy/data security and risk management practices as they develop.

Perform or oversee privacy and data protection risk assessments, including PRAs and DPIAs where required, and coordinate compliance monitoring and audits of higher-risk vendors or third parties that process personal data on the firm’s behalf.

Monitor, assess, and advise on evolving laws, regulations, standards, and enforcement trends - including developments in federal and state privacy, cross-border transfers, data governance, and other emerging data rules and recommend appropriate actions for the firm.

Develop and deliver training and communications to attorneys, paralegals and business professionals regarding privacy, data governance, records, and related obligations to promote privacy by design/default and a culture of compliance.

Collaborate with department representatives and firm leaders to align key procurement initiatives, sourcing strategies, and data-intensive projects with legal, privacy, data security, and risk management priorities, and prioritize deal and project support accordingly.

Identify and escrow potential risks in business transactions and operational processes, and document negotiation positions and areas of potential conflict (including liability, indemnities, assignments, payment terms and other key provisions) to minimize disputes and advance firm objectives.

All other duties as assigned or required.

Skills and experience

Required

After orientation at Cooley LLP, exhibit proficiency in the Microsoft Office suite, iManage and other firm applications
Ability to work extended and/or weekend hours, as required
Ability to travel, as required
JD from an ABA accredited law school
Active member in good standing of the jurisdiction in which the attorney is resident and the jurisdiction of the Cooley office to which the attorney is assigned
Substantial experience advising on data protection, privacy, and governance, including direct experience with U.S. export control regulations and data privacy/protection laws in the U.S., Europe, and Asia
6+ years of relevant experience, preferably as a practicing attorney
Advanced knowledge of privacy and data governance frameworks; experience drafting and operationalizing privacy and data policies
Depth in technology and commercial contracting, particularly with data processing/transfer agreements and privacy/security provisions
Advanced knowledge of GDPR

Preferred

Experience with risk assessments, compliance monitoring, and vendor oversight in privacy, as well as incident response and regulatory engagement
Expertise in cybersecurity Certifications such as CIPP/US, CIPP/E, or CIPT

Competencies

Excellent communication and organizational skills; strong sense of accountability Ability to analyze needs and determine priorities based on business objectives in a fast-paced environment Sound professional judgment and ability to translate complex legal requirements plainly for non-legal audiences Effective collaboration across global, cross-functional stakeholders

Benefits

medical
health savings account (with applicable medical plan)
dental
vision
health and/or dependent care flexible spending accounts
pre-tax commuter benefits
life insurance
AD&D
long-term care coverage
backup care for children and/or adults
other parental support benefits
firm-paid life insurance
AD&D
LTD
short term medical benefits
20 days of vacation
10 days of sick
10 paid holidays each year
generous parental leave and fertility benefits
New employees will attend a detailed benefit orientation to learn more about our many benefits and resources.