Cybersecurity & Data Privacy Associate — Global Compliance

BCG Attorney Search; Ann Arbor (MI); On-site; USD 80,000 - 120,000; Full time

Benefits offered by this job

Medical insurance

Dental insurance

Vision insurance

Profit-sharing

Generous paid time off

Flexible reimbursement account

Job summary

BCG Attorney Search is seeking a Cybersecurity and Data Privacy Associate for its Ann Arbor, MI office. The successful candidate will be part of the 3rd through 5th year associate class and will manage responsibilities related to privacy laws and data protection.

Key duties include preparing privacy policies, conducting assessments, negotiating contract provisions, and managing regulatory investigations. A Juris Doctor degree and bar admission in at least one U.S. jurisdiction are required.

Qualifications

• Experience with GDPR, CCPA, BIPA, CIPA, COPPA, FCRA, FERPA, FTC Act, GLBA, HIPAA, and VPPA.
• Strong academic credentials and time management skills.
• Ability to work collaboratively in a fast-paced environment.
• Flexibility for domestic and overseas travel.

Responsibilities

• Prepare and review privacy policies and data protection agreements.
• Conduct privacy impact assessments and transactional privacy due diligence.
• Negotiate privacy and security provisions of contracts.
• Manage incident response and regulatory investigations.
• Collaborate on privacy litigation and AI regulation matters.

Skills

Analytical skills

Problem-solving skills

Written communication

Verbal communication

Project management

Education

Juris Doctor (JD)

Job description

BCG Attorney Search is seeking a Cybersecurity and Data Privacy Associate for its Ann Arbor, MI office. The successful candidate will be part of the 3rd through 5th year associate class and will manage responsibilities related to privacy laws and data protection.

Key duties include preparing privacy policies, conducting assessments, negotiating contract provisions, and managing regulatory investigations. A Juris Doctor degree and bar admission in at least one U.S. jurisdiction are required.