Data Privacy & Cybersecurity Associate

The People Of: Professional Services; New York (NY); Hybrid; USD 200,000 - 250,000; Full time

Job summary

The People Of: Professional Services seeks a Data Privacy & Cybersecurity Associate to advise on privacy compliance, data governance, and regulatory matters for domestic and international clients. The role includes drafting data processing agreements, cookies guidance, and incident response leadership.

Candidates should have 3–6 years of relevant experience, strong understanding of US privacy laws, GDPR, HIPAA and GLBA, and admission to the state bar.

Qualifications

• 3–6 years of experience in a law firm or equivalent.
• Strong understanding of US state privacy legislation, GDPR and federal privacy regs.
• Admission to the relevant state bar is required.

Responsibilities

• Advise on complex privacy compliance and regulatory matters.
• Lead cybersecurity incident response and data governance efforts.
• Draft and negotiate data processing agreements and vendor contracts.
• Advise on cookies and tracking technologies and cross-border data transfers.
• Manage cybersecurity incidents, data breaches, and regulatory notifications.

Skills

Privacy law

GDPR knowledge

Cybersecurity

Regulatory compliance

Data processing agreements

Incident response

Education

Juris Doctor (JD)

State bar admission

Job description

Location: New York, NY / Boston, MA / Washington, DC / Multiple US Offices

Salary: $200K – $250K + Bonus

Experience: 3–6 Years

A highly regarded national law firm is seeking a Data Privacy & Cybersecurity Associate to join its growing practice. This opportunity offers exposure to sophisticated domestic and international clients across financial services, healthcare, technology and other regulated industries. The successful candidate will advise on complex privacy compliance, cybersecurity incident response, data governance and regulatory matters, working closely with experienced practitioners in a collaborative environment. The firm offers a hybrid working arrangement, with two days working remotely each week, alongside excellent opportunities for professional development and progression. Candidates should have 3–6 years of relevant experience, ideally gained within a reputable law firm, with a strong understanding of US state privacy legislation, GDPR and federal privacy regulations, including HIPAA and GLBA. Experience drafting and negotiating data processing agreements, advising on cookies and tracking technologies, and managing cybersecurity incidents involving data breaches, ransomware and regulatory notifications is particularly desirable. Additional expertise in privacy and cybersecurity due diligence, vendor risk management, cross-border data transfers, regulatory investigations and engagement with government authorities would be advantageous. Excellent academic credentials, strong drafting and analytical skills, and admission to the relevant state bar are required. Candidates with experience advising clients across multiple jurisdictions and handling complex, time-sensitive cybersecurity matters are particularly encouraged to apply. #TPOPS