Privacy & Data Protection Specialist

King & Spalding; Georgia; On-site; USD 85,000 - 150,000; Full time

Benefits offered by this job

Health insurance

401(k) plan

Paid time off

Life and disability insurance

Flexible benefits

Job summary

King & Spalding is a leading global law firm seeking a Privacy & Data Protection Analyst to advance the firm's privacy program across legal, technical, and business teams.

You will support privacy governance, third-party risk, and regulatory requirements, coordinating with Information Security, Legal, Procurement, HR, and the Privacy Committee to protect client and employee data, including PHI and CUI, and to drive remediation and program maturity.

Qualifications

• Bachelor's degree or equivalent professional experience.
• 3+ years supporting privacy, data protection, or regulated data governance.
• Experience reviewing privacy or security terms in vendor or client contracts.
• Familiarity with HIPAA, GDPR/UK GDPR, NIST, ISO 27001, NIST 800-171, or CMMC.
• Strong writing, organization, and cross-functional collaboration skills.

Responsibilities

• Support privacy program governance, including committee coordination and documentation.
• Review and negotiate vendor and client privacy requirements such as DPAs and data transfer terms.
• Assess data collection, storage, and sharing in third-party tools and vendors.
• Complete client privacy and AI assessments with internal stakeholders.
• Manage privacy processes like data subject requests, cookie/consent management, and notices.
• Lead governance for PHI and CUI, coordinating risk assessments and remediation.
• Advise on high-risk data handling and regulatory matters for engagement teams.
• Monitor privacy requirements across jurisdictions and translate into actionable guidance.
• Own core privacy governance activities in OneTrust (ROPAs, PIAs, TIAs, data flow).

Skills

Privacy governance

Vendor risk mgmt

Policy implementation

Data protection concepts

Stakeholder management

Education

Bachelor's degree

Tools

OneTrust

DPA review tools

Job description

King & Spalding is a leading global law firm seeking a Privacy & Data Protection Analyst to advance the firm's privacy program across legal, technical, and business teams.

You will support privacy governance, third-party risk, and regulatory requirements, coordinating with Information Security, Legal, Procurement, HR, and the Privacy Committee to protect client and employee data, including PHI and CUI, and to drive remediation and program maturity.