Privacy & Cybersecurity Associate (3–6 yrs) — Diverse Matters

Iceberg; Boston (MA); On-site; USD 180,000 - 230,000; Full time

Job summary

Iceberg, a U.S. law firm, is seeking an Associate with 3–6 years of Data Privacy & Cybersecurity experience to join its growing practice across multiple offices including Boston, Hartford, Parsippany, New York, Washington, D.C., and Miami.

You will advise on state and federal privacy frameworks, draft DPAs and policies, support incident response, and guide clients through regulator engagement and data governance matters.

Qualifications

• 3–6 years of Data Privacy & Cybersecurity experience
• Strong drafting, research and analytical skills
• Excellent written and verbal communication abilities
• Strong organizational skills and attention to detail
• Ability to manage complex matters independently and collaboratively
• Admission to the relevant state bar and good standing

Responsibilities

• Advising clients on U.S. state privacy laws, GDPR and global privacy requirements
• Advising on federal privacy frameworks, including GLBA and HIPAA
• Drafting and negotiating privacy policies, DPAs and related documentation
• Supporting cybersecurity incidents, including data breaches and ransomware/extortion events
• Advising clients through regulator and State Attorney General engagements
• Supporting fast-paced incident response matters, including occasional out-of-hours availability
• Data governance, retention and information risk (advantageous)
• Vendor risk and data transfer assessments (advantageous)
• Privacy & cybersecurity due diligence in M&A transactions (advantageous)
• Regulatory investigations involving the FTC, HHS or State AGs (advantageous)
• Data privacy-related law enforcement requests and interactions (advantageous)

Skills

Privacy

Cybersecurity

Legal drafting

Client communication

Regulatory matters

Job description

Iceberg, a U.S. law firm, is seeking an Associate with 3–6 years of Data Privacy & Cybersecurity experience to join its growing practice across multiple offices including Boston, Hartford, Parsippany, New York, Washington, D.C., and Miami.

You will advise on state and federal privacy frameworks, draft DPAs and policies, support incident response, and guide clients through regulator engagement and data governance matters.