Data Privacy and Cybersecurity Associate Attorney

BCG Attorney Search; New York (NY); Hybrid; USD 150,000 - 230,000; Full time

Benefits offered by this job

Hybrid work environment

Remote work options

Job summary

BCG Attorney Search seeks a Data Privacy and Cybersecurity Associate Attorney in New York City. The ideal candidate will have 3-6 years of experience advising clients on privacy compliance, incident response, data governance, and regulatory matters.

This role combines client advisory work with drafting and negotiating privacy policies and data processing agreements, plus handling breach responses and regulatory investigations.

Qualifications

• 3-6 years of data privacy and cybersecurity experience.
• Excellent drafting, written, and verbal communication skills.
• Strong legal research, analytical, and technical skills.
• Proven ability to manage complex matters with accuracy and attention to detail.
• Ability to work independently and collaboratively.
• Bar admission in the jurisdiction of residence, in good standing.

Responsibilities

• Advise clients on privacy compliance and regulatory matters, including state, GDPR, and federal laws.
• Draft, review, and negotiate privacy policies and data processing agreements.
• Provide guidance on cookies and tracking technologies.
• Manage cybersecurity and incident response matters, including breach response.
• Support time-sensitive cybersecurity incidents, requiring availability outside regular hours.
• Engage in data governance and information risk management.
• Conduct privacy and cybersecurity due diligence.
• Counsel clients in regulatory investigations and non-litigation matters.

Skills

Analytical skills

Drafting skills

Legal research

Communication skills

Organization

Independence

Education

Juris Doctor (JD)

Job description

Job Overview

A law firm seeks a Data Privacy and Cybersecurity Associate Attorney in New York City. The ideal candidate will have 3-6 years of experience in data privacy and cybersecurity, advising clients on privacy compliance, cybersecurity incident response, data governance, and related regulatory matters.

Duties

• Advise clients on privacy compliance and regulatory matters, including U.S. state privacy laws, GDPR, and federal privacy laws.
• Draft, review, and negotiate privacy policies and data processing agreements.
• Provide guidance on the use of cookies and tracking technologies.
• Manage cybersecurity and incident response matters, including breach response and regulator engagement.
• Support time-sensitive cybersecurity incidents, requiring availability outside regular hours.
• Engage in data governance and information risk management.
• Conduct privacy and cybersecurity due diligence.
• Counsel clients in regulatory investigations and non-litigation administrative matters.

Requirements

• 3-6 years of data privacy and cybersecurity experience.
• Excellent drafting, written, and verbal communication skills.
• Strong legal research, analytical, and technical skills.
• Proven ability to manage complex matters with accuracy and attention to detail.
• Ability to work independently and collaboratively.
• Admission to the bar in the jurisdiction of residence, in good standing.

Education

• Juris Doctor (JD) degree from an accredited law school.

Certifications

• Bar admission in the relevant jurisdiction.

Skills

• Strong analytical and problem-solving skills.
• Excellent organizational and multitasking abilities.
• Proficiency in legal research and writing.

Benefits

• Hybrid work environment with remote work options.