Data Privacy, Cybersecurity & AI Attorney

BCG Attorney Search; San Francisco (CA); On-site; USD 180,000 - 280,000; Full time

Benefits offered by this job

Health insurance with HSA

Short term disability

Long term disability

Dental insurance

Vision care

Life insurance

401K

Vacation and sick time

Employee assistance program

Voluntary accident insurance and other

Commuter and Transit programs

Job summary

BCG Attorney Search seeks a highly motivated, business-minded attorney with 3-6 years of experience to join the Data Privacy & Cybersecurity Practice in San Francisco. You will provide legal advice and risk-based evaluations on privacy, AI, and cybersecurity issues for sophisticated clients.

The role involves drafting privacy notices, incident response plans, DPIAs, and guidance on regulatory matters, with opportunities to advise on AI governance and cross-border data transfers.

Qualifications

• J.D. from an accredited law school in good standing.
• 3+ years of data privacy and cybersecurity experience.
• Experience with U.S. federal/state privacy laws and EU privacy law.
• Prior law firm experience required.
• Strong professional judgment and multitasking ability.

Responsibilities

• Assist companies in building or scaling privacy programs and provide guidance on privacy laws.
• Draft and revise privacy notices, terms of service, incident response plans, and data protection policies.
• Provide strategic advice on AI governance, DPIAs, and product counseling.
• Negotiate and draft professional services agreements, vendor agreements, data processing agreements, and cross-border transfer agreements.
• Lead privacy and security due diligence in M&A and other corporate transactions.
• Drive data breach preparation, risk mitigation, coordination, and response efforts.

Skills

Practical problem solving

Strong writing skills

Excellent communication

Regulatory knowledge (privacy, AI)

Supervising junior attorneys

Business-minded

Education

J.D. from an accredited law school

Job description

A law firm seeks a highly motivated, business-minded attorney with 3-6 years of experience to join the Data Privacy & Cybersecurity Practice in San Francisco. This role involves providing legal advice and risk-based evaluations on complex, cutting-edge privacy, AI, and cybersecurity issues for sophisticated clients.

Duties

• Assist companies in building or scaling privacy programs and provide compliance guidance regarding U.S. federal and state privacy laws, GDPR, and other global standards.
• Draft and revise privacy notices, terms of service, incident response plans, information security policies, and other data protection policies.
• Provide strategic advice on tracking technologies, prepare Data Protection Impact Assessments (DPIAs), and offer product counseling.
• Negotiate and draft professional services agreements, vendor agreements, data processing agreements, and cross-border transfer agreements.
• Develop and refine AI governance programs, including drafting internal/external AI policies, advising on AI use cases, and performing AI risk assessments.
• Respond to regulatory requests and formal investigations from agencies such as the FTC, state Attorneys General, and international data protection authorities.
• Lead and negotiate all phases of privacy and security-related due diligence in mergers, acquisitions, and similar corporate transactions.
• Drive data breach preparation, risk mitigation, coordination, and response efforts.

Requirements

• J.D. from an accredited law school and in good standing with the California State Bar.
• 3+ years of legal experience, including substantive data privacy experience and in-depth knowledge of U.S. and EU privacy and AI laws.
• Prior law firm experience is required.
• Strong professional judgment, excellent communication skills, and the ability to manage multiple tasks.
• Ability to supervise junior attorneys to ensure deadlines are met.

Education

• J.D. from an accredited law school.

Certifications

• IAPP CIPP certification (U.S. and EU) is strongly preferred.
• AIGP certification is a plus.

Skills

• Practical problem-solving with superior writing and communication skills.
• Comfortable navigating regulatory ambiguity and translating legal requirements into actionable advice.
• Working knowledge of CCPA, various state comprehensive privacy laws, CIPA, HIPAA, FCRA, GLBA, TCPA, CAN-SPAM, COPPA, ROSCA, and GDPR.
• Knowledgeable about privacy and AI regulatory compliance programs with a proven record of starting or iterating such programs.
• Inquisitive mindset with the ability to learn about new technologies and laws in a fast-paced environment.
• Additional consideration for sector-specific experience in financial services, children's privacy, telecom, biometrics, consumer health data, genetics, or digital advertising.
• Discretionary bonus.
• Health insurance with an optional HSA.
• Short term disability and long term disability.
• Dental insurance and vision care.
• Life insurance.
• Healthcare and Dependent Care Flexible Spending Accounts.
• 401K.
• Vacation and sick time.
• Employee assistance program.
• Voluntary accident insurance, voluntary life, voluntary disability, voluntary critical illness and cancer insurance, and pet insurance.
• Commuter and Transit programs (where available).

As one of the largest law firms in the U.S. with more than 40 offices, it was founded in 1967. This full-service firm provides legal representation in banking and finance, blockchain, corporate, cybersecurity, energy, entertainment, environmental, food, gaming, health care, real estate, tax, hospitality, and others. This innovative law firm creates creative and efficient strategies that enable to improve predictability, provide better insights, and deliver more value. The firm is committed to diversity and appreciates all backgrounds. Having a collaborative environment, the attorneys and staff have achieved significant results in the legal community. The firm provides new associates with high-level training in client management, business development, collaboration, and cultural skills. Offering unique professional opportunities, the firm empowers attorneys at all levels to shape their paths to success. The firm has developed a strong commitment to giving back to the community and strives to make a difference by leading, volunteering, and donating to a wide range of causes. The firm has numerous recognition awards and awards for its philanthropic giving, diversity, and innovation.