Data Privacy and Data Security Attorney

Taylor Root; New Orleans (LA); On-site; USD 110,000 - 150,000; Full time

Job summary

Taylor Root represents a premier U.S. law firm seeking a Data Privacy & Cybersecurity Associate Attorney with 2-4 years of experience to join its Privacy, Cybersecurity, and Technology practice in New Orleans, LA.

You'll advise clients on privacy regulations, manage data breach responses, draft policies and DPAs, and negotiate technology-related agreements, while collaborating with partners on complex, cross-functional matters.

Qualifications

• J.D. from an accredited law school with strong academic credentials.
• 2-4 years of privacy, cybersecurity, data breach, and regulatory experience.
• Experience handling data privacy matters and incident response.
• Experience drafting privacy policies and security-related documentation.
• Experience negotiating SaaS, data processing addenda, and data-related contracts.
• Familiarity with vendor risk management and third-party risk assessments.
• Strong legal research, writing, and communication skills.
• Strong client-service orientation and ability to manage multiple matters.
• CIPP/US, CIPP/E, CIPM or similar certifications preferred.

Responsibilities

• Advise clients on data privacy, cybersecurity, and information governance matters.
• Manage data breach and cybersecurity incident response engagements.
• Assist investigations and regulatory examinations and inquiries.
• Draft and update privacy policies, security programs, and DPAs.
• Counsel on privacy and data protection regulations.
• Review and draft MSAs, SaaS, software licensing, and data-related contracts.
• Evaluate vendor management frameworks and privacy risk assessments.
• Provide legal research and guidance on emerging privacy issues.
• Collaborate with partners on cross-functional privacy, data security, and commercial matters.

Skills

Privacy law

Regulatory compliance

Legal research

Analytical writing

Communication skills

Client service

Education

J.D. from an accredited law school

Job description

Our client, a highly regarded law firm, is seeking a Data Privacy & Cybersecurity Associate Attorney with 2-4 years of experience to join its growing Privacy, Cybersecurity, and Technology practice. This is an excellent opportunity for an attorney looking to work on sophisticated privacy, data security, incident response, and technology-related matters for a diverse client base.

Key Responsibilities

• Advise clients on a broad range of data privacy, cybersecurity, and information governance matters.
• Manage and support data breach and cybersecurity incident response engagements, including incident triage, containment strategies, risk assessments, notification obligations, and regulatory compliance requirements.
• Assist clients with incident investigations, regulatory examinations, and responses to inquiries from administrative, regulatory, and legislative bodies.
• Draft, review, and update privacy policies, information security policies, privacy management programs, and related compliance documentation.
• Counsel clients on state, federal, and industry-specific privacy and data protection regulations.
• Review, negotiate, and draft commercial agreements, including Master Service Agreements (MSAs), SaaS agreements, software licensing agreements, data processing addenda (DPAs), and other technology and data-related contracts.
• Evaluate vendor management frameworks and conduct privacy and cybersecurity risk assessments related to third-party service providers, software vendors, and outsourcing arrangements.
• Provide legal research, analysis, and practical guidance on emerging privacy, cybersecurity, and technology issues.
• Collaborate with partners and clients on complex cross-functional matters involving privacy, data security, regulatory compliance, and commercial transactions.

Qualifications

• J.D. from an accredited law school with strong academic credentials.
• 2-4 years of experience handling data privacy, cybersecurity, data breach response, and related regulatory matters.
• Demonstrated experience managing cybersecurity incidents, data breach investigations, and compliance-driven response efforts.
• Experience drafting and reviewing privacy policies, security frameworks, and compliance documentation.
• Strong background reviewing and negotiating technology, SaaS, software licensing, and data-related commercial agreements.
• Familiarity with vendor risk management, third-party risk assessments, and privacy compliance programs.
• Exceptional legal research, analytical, writing, and communication skills.
• Strong client-service orientation and the ability to manage multiple matters in a fast-paced environment.
• CIPP/US, CIPP/E, CIPM, or other privacy-related certifications are highly preferred.