Cybersecurity & Data Privacy Associate — AI & Compliance

Direct Counsel; Washington (District of Columbia); Hybrid; USD 260,000 - 420,000; Full time

Benefits offered by this job

Hybrid work model

Job summary

Direct Counsel is seeking a Cybersecurity and Data Privacy Associate Attorney to join its Washington, D.C. office. The ideal candidate possesses 2–6 years of cybersecurity, data privacy, and AI regulatory experience and a strong academic record.

Experience in both advisory and regulatory-facing work is valued; government or regulatory agency background is welcome. The firm offers a hybrid work model and robust career development resources.

Qualifications

• Approximately 2–6 years of experience in cybersecurity, data privacy, AI law, or related regulatory practice.
• Prior law firm experience preferred; government or regulatory agency experience strongly welcomed.
• Strong academic credentials and excellent legal writing and analytical skills.
• Demonstrated interest in technology, AI governance, privacy, and cybersecurity issues.
• Ability to manage multiple projects in a fast-paced, evolving regulatory environment.

Responsibilities

• Advise clients on AI, cybersecurity, and data privacy incident preparedness and breach response.
• Support regulatory investigations involving privacy, cybersecurity, and AI issues.
• Assist in developing compliance programs under U.S. and state privacy laws, including frameworks such as CCPA, HIPAA, BIPA, NIST, and related regulations.
• Conduct privacy, AI, and cybersecurity due diligence in connection with M&A and other transactions.
• Draft and negotiate data processing agreements, privacy policies, and cybersecurity‑related contractual provisions.
• Monitor evolving regulatory and legislative developments in AI, privacy, and cybersecurity.

Skills

Cybersecurity

Data privacy

AI governance

Regulatory practice

Legal writing

Project management

Job description

Direct Counsel is seeking a Cybersecurity and Data Privacy Associate Attorney to join its Washington, D.C. office. The ideal candidate possesses 2–6 years of cybersecurity, data privacy, and AI regulatory experience and a strong academic record.

Experience in both advisory and regulatory-facing work is valued; government or regulatory agency background is welcome. The firm offers a hybrid work model and robust career development resources.