Privacy & Data Protection Specialist

King & Spalding; Atlanta (GA); On-site; USD 90,000 - 120,000; Full time

Benefits offered by this job

Health and wellness plan

401(k) plan

Paid Time Off

Job summary

King & Spalding seeks a Privacy & Data Protection Analyst to mature the firm’s privacy program, collaborating with Information Security, Legal, Information Governance, Procurement, HR, and the Privacy Committee to govern and protect personal and client information.

The role covers DPAs, data transfers, AI/privacy assessments, vendor risk, and policy governance, in a fast-paced legal setting. Strong privacy framework knowledge and stakeholder collaboration are essential.

Qualifications

• Bachelor’s degree or equivalent professional experience.
• 3+ years of privacy, data protection, or regulated data governance experience.
• Familiarity with privacy concepts like PHI, DPAs, data transfers, and DPIAs.

Responsibilities

• Coordinate Privacy Committee meetings, prepare agendas, materials, and follow-up tracking.
• Review and negotiate DPAs, data transfer terms, and privacy provisions in client agreements.
• Assess how vendors collect, use, store, and protect sensitive information as part of third‑party risk management.
• Complete client privacy and AI assessments and questionnaires with internal stakeholders.
• Manage data subject access request intake, privacy notices, and policy maintenance.
• Lead governance activities for HIPAA PHI and CUI, including risk assessments and remediation.
• Advise on data handling for high‑risk matters and regulatory requirements.
• Stay updated on privacy laws and translate changes into practical guidance.
• Own privacy governance activities in OneTrust (ROPAs, PIAs/DPIAs, TIAs, etc.).

Skills

Privacy knowledge

Stakeholder management

Writing skills

Attention to detail

Risk assessment

Education

Bachelor’s degree or equivalent experience

Tools

OneTrust

Job description

King & Spalding seeks a Privacy & Data Protection Analyst to mature the firm’s privacy program, collaborating with Information Security, Legal, Information Governance, Procurement, HR, and the Privacy Committee to govern and protect personal and client information.

The role covers DPAs, data transfers, AI/privacy assessments, vendor risk, and policy governance, in a fast-paced legal setting. Strong privacy framework knowledge and stakeholder collaboration are essential.