Privacy and Mobility Associate

Varnum LLP; Michigan; On-site; USD 110,000 - 170,000; Full time

Job summary

Varnum LLP seeks an Associate Attorney with 3–5 years of legal experience to support its Privacy and Mobility Practice Team in Grand Rapids, Novi, MI or Naples, FL. The team advises on AI, data privacy, security, and mobility issues for clients across industries.

Responsibilities include counseling, contracting, compliance, and regulatory matters, drafting privacy-related agreements, conducting research, and producing practitioner‑focused guidance. Preferred: IAPP CIPP/US certification.

Qualifications

• Juris Doctor degree from an accredited law school.
• Admitted to practice law in at least one U.S. jurisdiction and in good standing.
• Three to five years of relevant legal experience.
• Experience in privacy, data protection, cybersecurity, technology transactions, or data governance.
• Familiarity with state privacy laws, GDPR, HIPAA, GLBA, and related frameworks.
• Ability to produce clear client-ready written work product including contracts and policies.
• Strong analytical judgment and attention to detail.
• Interest in technology-forward industries including autonomous vehicles and mobility.

Responsibilities

• Advising clients on privacy and cybersecurity compliance programs across state, federal, and global requirements.
• Drafting, reviewing, and negotiating privacy- and data-related agreements and data sharing arrangements.
• Conducting legal research and preparing client-ready memoranda and recommendations.
• Drafting privacy policies, disclosures, internal policies, and governance documentation.
• Supporting mobility-related matters including privacy, regulatory compliance, and product connectivity.
• Assisting with privacy and cybersecurity incident response and regulatory inquiries.
• Monitoring developments in privacy and cybersecurity and translating them into client updates and strategies.

Education

Juris Doctor degree from an accredited law school

Admission to practice law in at least one U.S. jurisdiction and in good standing

Job description

Varnum is seeking an Associate Attorney with three to five years of legal experience to support its Privacy and Mobility Practice Team in one of the firm’s Grand Rapids, Michigan; Novi, Michigan; or Naples, Florida offices.

Varnum’s Privacy and Mobility team is a leading national practice that works on the cutting edge of emerging technology and law. The team advises organizations on the development of AI, data privacy and security practices and provides real‑time counsel in response to an evolving regulatory environment. The team works with clients across industries, including autonomous and connected vehicles and the consumer data marketplace, and provides practical, client‑focused representation in matters shaped by changing privacy, AI, cybersecurity, technology, and mobility requirements. This is a unique opportunity to join a thriving law firm and a highly successful team of attorneys.

Responsibilities

The associate will work with partners, senior attorneys, and clients on a range of counseling, contracting, compliance, and regulatory matters. Responsibilities will include:

• Advising clients on the development, implementation, and maintenance of privacy and cybersecurity compliance programs, including programs designed to address state, federal, and global privacy requirements.
• Drafting, reviewing, and negotiating privacy- and data‑related agreements, including data sharing agreements, licensing agreements, vendor agreements, technology agreements, and other commercial contracts involving personal, de‑identified, connected vehicle, consumer, or business data.
• Conducting legal research and analysis on privacy, cybersecurity, technology, mobility, and related regulatory issues, and preparing client‑ready memoranda, presentations, and practical recommendations.
• Drafting privacy policies, consumer‑facing disclosures, internal policies, cybersecurity guidance, data governance documentation, and related client‑facing work product.
• Supporting mobility‑related matters involving privacy, autonomous vehicle regulatory and safety compliance, Federal Motor Vehicle Safety Standards, NHTSA compliance, product liability, vehicle connectivity, and connected products.
• Assisting with privacy and cybersecurity incident response, regulatory inquiries, and related client communications.
• Monitoring legal and regulatory developments affecting privacy, cybersecurity, data governance, connected technologies, and mobility, and translating those developments into client updates, policies, and compliance strategies.

Qualifications

Candidates should be prepared to grow into a role that combines privacy counseling, technology contracting, mobility‑sector regulatory work, and general law firm associate responsibilities. Candidates should have:

• Juris Doctor degree from an accredited law school.
• Admission to practice law in at least one U.S. jurisdiction and in good standing.
• Three to five years of relevant legal experience.
• Prior experience in privacy, data protection, cybersecurity, technology transactions, data governance, or a closely related area.
• Experience with state consumer privacy laws, GDPR, GLBA, HIPAA, BIPA, cybersecurity governance, privacy policies, data processing terms, data sharing agreements, or technology contracting.
• Demonstrated ability to produce clear, client‑ready written work product, including legal analysis, contract language, policies, and practical recommendations.
• Sound analytical judgment, attention to detail, and the ability to work through ambiguous legal and business issues to identify practical, risk‑based solutions.
• Interest in working with clients in technology‑forward industries, including autonomous and connected vehicles, mobility services, consumer data, connected products, and other businesses navigating privacy, cybersecurity, and regulatory issues.
• Ability to manage multiple matters, deadlines, and priorities while maintaining accuracy, confidentiality, and professionalism.
• Preferred: IAPP CIPP/US certification.

In addition, successful candidates will demonstrate the following through their experience and work product:

• Ownership of matters and follow‑through on deadlines, details, and client commitments.
• A collaborative, professional approach to working with partners, associates, staff, and clients.
• Curiosity about emerging technologies and the business context in which clients collect, use, share, and protect data.
• Ability to turn complex, unsettled, or incomplete information into clear options and practical recommendations.