Mid-Level Technology Transactions, Cybersecurity & Privacy Associate

Foley & Lardner LLP; Washington (District of Columbia); On-site; USD 120,000 - 165,000; Full time

Job summary

Foley & Lardner LLP is seeking an experienced privacy and cybersecurity advisor in Washington, DC. The role focuses on regulatory counseling, incident response, and breach notification compliance across diverse frameworks.

Ideal candidates will demonstrate strong data mapping, processing records expertise, and the ability to craft and maintain security and privacy policies. CIPP or equivalent certification is valued, with experience across technology, licensing, or professional services delivery

Qualifications

• Experience advising on privacy and cybersecurity compliance and incident response, including breach notification laws.
• Proven familiarity with U.S. state, federal and international privacy and regulatory regimes (CCPA, COPPA, GDPR, GLBA, HIPAA, TCPA).
• Strong background in data mapping, records of processing, privacy program governance and policy development.

Responsibilities

• Advise on privacy and cybersecurity compliance and incident response programs.
• Conduct data breach investigations and notification processes as required by law.
• Develop and assess security and privacy policies and procedures, and perform privacy impact assessments.

Skills

Privacy compliance

Cybersecurity awareness

Regulatory counseling

Incident response

Data breach investigations

Privacy impact assessments

Education

CIPP certification

Job description

Overview

• Required experience includes advising on privacy and cybersecurity compliance, counseling, and incident response, encompassing breach notification laws.
• Familiarity is required with U.S. state, federal, and international privacy and regulatory compliance and counseling, specifically including CCPA, COPPA, GDPR, GLBA, HIPAA, and TCPA.
• Candidates must demonstrate strong experience in several of the following areas: data breach investigations and notifications, privacy assessments, data mapping and records of processing exercises, and development of security and privacy policies and procedures.
• CIPP or other relevant industry certification is valued.
• Educational, legal work, or non-legal work experience demonstrating an interest or capabilities in technology, licensing, cybersecurity, or professional services delivery or management is highly valued.