Asst. General Counsel, Data Privacy & Governance (Hybrid)

Cooley; Chicago (IL); Hybrid; USD 240,000 - 300,000; Full time

Benefits offered by this job

Medical benefits

Health savings account (HSA)

Dental benefits

Vision benefits

Flexible spending accounts (FSA)

Commuter benefits

Life insurance

AD&D

Long-term care coverage

Parental leave

Job summary

Cooley seeks an Assistant General Counsel to lead data regulation, privacy, security, and governance. You will advise on privacy laws, implement governance frameworks, and collaborate with the GC's Office on data risk management and policy development.

Responsibilities include DPIAs, data processing agreements, and cross-border data transfers. The role requires strong negotiation, cross-functional collaboration, and global privacy fluency to support time-sensitive outcomes in a hybrid in-office

Qualifications

• J.D. from ABA-accredited law school and bar admission in good standing.
• Substantial experience advising on data protection, privacy, and governance.
• Experience with U.S. export controls and cross-border data transfers.

Responsibilities

• Advise on data regulation, privacy, data security, and governance across the firm.
• Develop and update privacy and data governance policies and procedures.
• Provide privacy input on business projects and initiatives.
• Conduct privacy risk assessments and DPIAs; coordinate vendor risk assessments.
• Draft, review, and negotiate data processing and transfer agreements with customers and vendors.

Skills

Privacy law

Data governance

Regulatory compliance

GDPR knowledge

Export controls

Vendor management

Contract negotiation

Cybersecurity awareness

Communication skills

Business acumen

Education

J.D. from ABA-accredited law school

Tools

Microsoft Office

iManage

Job description

Cooley seeks an Assistant General Counsel to lead data regulation, privacy, security, and governance. You will advise on privacy laws, implement governance frameworks, and collaborate with the GC's Office on data risk management and policy development.

Responsibilities include DPIAs, data processing agreements, and cross-border data transfers. The role requires strong negotiation, cross-functional collaboration, and global privacy fluency to support time-sensitive outcomes in a hybrid in-office