Data Privacy & Cybersecurity Attorney

Iceberg; Boston (MA); On-site; USD 180,000 - 230,000; Full time

Job summary

Iceberg, a U.S. law firm, is seeking an Associate with 3–6 years of Data Privacy & Cybersecurity experience to join its growing practice across multiple offices including Boston, Hartford, Parsippany, New York, Washington, D.C., and Miami.

You will advise on state and federal privacy frameworks, draft DPAs and policies, support incident response, and guide clients through regulator engagement and data governance matters.

Qualifications

• 3–6 years of Data Privacy & Cybersecurity experience
• Strong drafting, research and analytical skills
• Excellent written and verbal communication abilities
• Strong organizational skills and attention to detail
• Ability to manage complex matters independently and collaboratively
• Admission to the relevant state bar and good standing

Responsibilities

• Advising clients on U.S. state privacy laws, GDPR and global privacy requirements
• Advising on federal privacy frameworks, including GLBA and HIPAA
• Drafting and negotiating privacy policies, DPAs and related documentation
• Supporting cybersecurity incidents, including data breaches and ransomware/extortion events
• Advising clients through regulator and State Attorney General engagements
• Supporting fast-paced incident response matters, including occasional out-of-hours availability
• Data governance, retention and information risk (advantageous)
• Vendor risk and data transfer assessments (advantageous)
• Privacy & cybersecurity due diligence in M&A transactions (advantageous)
• Regulatory investigations involving the FTC, HHS or State AGs (advantageous)
• Data privacy-related law enforcement requests and interactions (advantageous)

Skills

Privacy

Cybersecurity

Legal drafting

Client communication

Regulatory matters

Job description

An established U.S. law firm is growing its Data Privacy & Cybersecurity practice and is looking for a talented Associate with 3–6 years’ experience to join its team. This role is open to multiple locations including: Boston, MA, Hartford, CT, Parsippany, NJ, New York, NY, Washington, D.C., or Miami, FL

This is an excellent opportunity for a privacy and cybersecurity lawyer looking to work on a broad range of sophisticated, client-facing matters across privacy compliance, cybersecurity, incident response and regulatory issues.

The role will involve:

• Advising clients on U.S. state privacy laws, GDPR and global privacy requirements
• Advising on federal privacy frameworks, including GLBA and HIPAA
• Drafting and negotiating privacy policies, DPAs and related documentation
• Supporting cybersecurity incidents, including data breaches and ransomware/extortion events
• Advising clients through regulator and State Attorney General engagements
• Supporting fast-paced incident response matters, including occasional out-of-hours availability

Experience in any of the following would also be advantageous:

• Data governance, retention and information risk
• Vendor risk and data transfer assessments
• Privacy & cybersecurity due diligence in M&A transactions
• Regulatory investigations involving the FTC, HHS or State AGs
• Data privacy-related law enforcement requests and interactions

The ideal candidate will have:

• 3–6 years of relevant Data Privacy & Cybersecurity experience
• Strong drafting, research and analytical skills
• Excellent written and verbal communication abilities
• Strong organizational skills and attention to detail
• The ability to manage complex matters independently and collaboratively
• Admission to the relevant state bar and good standing

If you're a privacy or cybersecurity lawyer considering your next move, I'd be keen to have a confidential conversation.