Privacy & Cybersecurity Associate (Partner Track)

BCG Attorney Search; San Francisco (CA); On-site; USD 180,000 - 240,000; Full time

Benefits offered by this job

Health Insurance

Dental & Vision Insurance

Life Insurance

Disability Insurance

401(k) Retirement Plan

Paid Vacation & Sick Leave

Commuter Benefits

Job summary

BCG Attorney Search is seeking a Mid-Level Associate in San Francisco with 3–4 years of data privacy and cybersecurity practice. You will advise clients on global and U.S. data protection laws and engage in compliance, regulatory counseling, and transactional privacy work.

The role emphasizes privacy program design, policy drafting, incident response, and risk mitigation, with a partner-track opportunity for top performers in a fast-paced, client-focused environment.

Qualifications

• Minimum 3 years of legal experience in data privacy and cybersecurity.
• Experience in regulatory compliance, contract negotiation, and risk management.
• Excellent written and verbal communication skills; ability to work collaboratively.

Responsibilities

• Counsel clients on U.S. and international data protection frameworks (e.g., CCPA, GDPR).
• Draft and revise privacy policies, terms of service, security policies, and incident response plans.
• Draft, negotiate, and review data sharing agreements and DPAs.
• Respond to regulatory inquiries and investigations related to privacy matters.
• Conduct privacy and cybersecurity due diligence for corporate transactions.
• Lead data breach preparation, response, and risk mitigation efforts.
• Advise on AI governance and compliance with U.S. and EU regulations (e.g., EU AI Act).
• Support cross-functional teams on privacy by design and risk assessments.

Skills

Data Privacy

Cybersecurity

Regulatory Compliance

Contract Negotiation

Risk Management

Communication Skills

Team Collaboration

Education

Juris Doctor (JD)

Job description

BCG Attorney Search is seeking a Mid-Level Associate in San Francisco with 3–4 years of data privacy and cybersecurity practice. You will advise clients on global and U.S. data protection laws and engage in compliance, regulatory counseling, and transactional privacy work.

The role emphasizes privacy program design, policy drafting, incident response, and risk mitigation, with a partner-track opportunity for top performers in a fast-paced, client-focused environment.