Data Privacy & Cybersecurity Associate Attorney

Lateral Link; Maryland; On-site; USD 260,000 - 370,000; Full time

Job summary

Lateral Link in Washington, DC is seeking a mid-level associate (3–6 years) in data privacy and cybersecurity to counsel clients across financial services, health care, life sciences, technology and asset management.

You will lead incident response, advise on GDPR, CCPA/CPRA and other privacy frameworks, draft privacy policies and data processing agreements, and handle data litigation and regulatory investigations with real responsibility.

Qualifications

• 3–6 years of privacy and cybersecurity experience at a law firm.
• Real reps applying GDPR, CCPA/CPRA, and other global privacy frameworks
• Experience managing data breach investigations and incident response
• Strong legal writing; DC bar admission

Responsibilities

• Incident response — managing data breach investigations from first call through regulator notification
• Compliance counseling under GDPR, CCPA/CPRA, and other U.S. state and international privacy frameworks
• Drafting privacy policies, data processing agreements, and cybersecurity protocols
• Data litigation, regulatory investigations, and enforcement actions

Skills

Privacy law

Data breach response

Regulatory investigations

Legal writing

Education

DC Bar admission

Job description

Data privacy is one of the few practices where the rulebook is still being written — new state statutes, FTC enforcement theories, and AI governance rules land every quarter, and each one creates client work.

A Global 100 firm with a nationally ranked data, privacy & cybersecurity practice is hiring a mid-level associate (3–6 years) in Washington, DC. Cravath scale — $260K–$370K depending on class year.

You'd counsel clients across financial services, health care, life sciences, technology, and asset management — advising on compliance, running data breach responses, and handling regulatory investigations with real responsibility at your level.

The work includes:

• Incident response — managing data breach investigations from first call through regulator notification
• Compliance counseling under GDPR, CCPA/CPRA, and other U.S. state and international privacy frameworks
• Drafting privacy policies, data processing agreements, and cybersecurity protocols
• Data litigation, regulatory investigations, and enforcement actions

What you bring:

• 3–6 years of privacy and cybersecurity experience at a law firm
• Real reps applying GDPR, CCPA/CPRA, and other global privacy frameworks
• Experience managing data breach investigations and incident response
• Strong legal writing; DC bar admission

What you get:

• A privacy platform serving financial services, health care, life sciences, tech, and asset management clients
• A specialized, portable skill set that gets more valuable with every new privacy law
• Cravath scale ($260K–$370K depending on class year)