Cybersecurity & Data Privacy Associate

ArentFox Schiff; City of Troy (NY); Hybrid; USD 180,000 - 280,000; Full time

Job summary

ArentFox Schiff is seeking a privacy attorney to advise Fortune 500s, startups, and government clients on complex privacy matters. You will handle privacy policies, DPAs, contract privacy provisions, and privacy impact assessments across US and international matters, including GDPR, CCPA, HIPAA, and other regimes.

The role requires experience with regulatory investigations, incident response, adtech/privacy litigation, and willingness to travel domestically and overseas to serve clients globally.

Qualifications

• Experience preparing and reviewing privacy policies.
• Experience drafting and negotiating data protection agreements (DPAs).
• Ability to conduct privacy impact assessments (PIA/DPIA).
• Experience with regulatory investigations and incident response.

Responsibilities

• Prepare and review privacy policies and DPAs.
• Draft and negotiate privacy provisions in contracts.
• Conduct privacy impact assessments (PIA/DPIA) and due diligence.
• Manage regulatory investigations and incident response across matters.
• Travel domestically and overseas as needed.

Skills

Privacy policy drafting

Data protection agreements

PIA/DPIA

Regulatory investigations

Incident response

Privacy law knowledge

Privacy contract provisions

Job description

Overview

• ArentFox Schiff's expertise is sought out by Fortune 500s, start-ups, international governments, non-profits, trade associations, and private individuals.
• Required experience includes preparing and reviewing privacy policies, data protection agreements, privacy and security provisions of contracts, privacy impact assessments, transactional privacy and security due diligence and agreement negotiations, incident response, and regulatory investigations.
• The ideal candidate should have experience with international, federal, and state privacy laws, including the GDPR, the CCPA and other state-level comprehensive privacy laws, BIPA, CIPA, COPPA, FCRA, FERPA, the FTC Act, GLBA, HIPAA, and VPPA.
• Experience with adtech, privacy litigation, and AI regulation is considered a plus.
• The role requires flexibility for domestic and overseas travel.