Data Privacy & Governance Counsel — Hybrid

Cooley LLP; San Francisco (CA); Hybrid; USD 240,000 - 300,000; Full time

Benefits offered by this job

Medical

Health savings account

Dental

Vision

Commuter benefits

Life insurance

Parental leave

Vacation days

Job summary

Cooley LLP is seeking an Assistant General Counsel to join the General Counsel's Office in a hybrid SF-based role focusing on data regulation, privacy, security and governance. You will shape policy, advise on cross-border data flows, and manage vendor and client data processing agreements to minimize risk while enabling business aims.

The role requires strong privacy law expertise, 6+ years in the field, and a deep understanding of GDPR and CPRA/CCPA, with collaboration across technology,

Qualifications

• J.D. from ABA-accredited law school required.
• Active bar membership in relevant jurisdiction and Cooley office.
• 6+ years of experience advising on data privacy and governance.
• Experience with U.S. export control regulations.
• Experience drafting and negotiating data processing/transfer agreements.
• Strong business acumen and risk management ability.

Responsibilities

• Advise on data regulation and governance, privacy, data security, and retention across firm operations.
• Draft and update privacy and data governance policies.
• Collaborate with Data Protection Officer, GC Office and stakeholders on compliance.
• Draft/negotiates data processing agreements and security addenda.
• Coordinate privacy compliance with GDPR, CCPA/CPRA, and other regimes.

Skills

Data privacy

Data governance

Export controls

Contracting

Regulatory compliance

Cross-functional collab

Microsoft Office

iManage

Education

J.D. from ABA-accredited law school

Active law license

Job description

Cooley LLP is seeking an Assistant General Counsel to join the General Counsel's Office in a hybrid SF-based role focusing on data regulation, privacy, security and governance. You will shape policy, advise on cross-border data flows, and manage vendor and client data processing agreements to minimize risk while enabling business aims.

The role requires strong privacy law expertise, 6+ years in the field, and a deep understanding of GDPR and CPRA/CCPA, with collaboration across technology,