Privacy & Data Protection Specialist (HIPAA/CUI)

King & Spalding LLP; Atlanta (GA); Hybrid; USD 90,000 - 130,000; Full time

Benefits offered by this job

Health and wellness plan

Life and disability insurance

Flexible spending accounts & HSA

401(k) plan

Profit sharing plan

Paid Time Off (PTO)

Job summary

King & Spalding LLP seeks a Privacy & Data Protection Analyst to advance the firm's privacy program. You will collaborate with Information Security, Legal, and business stakeholders to govern, protect, and responsibly use personal information, including PHI and CUI, across regulated data types.

You will coordinate privacy governance, review DPAs and data transfer terms, and support assessments and questionnaires to demonstrate controls, ensuring client confidence in data protection practices.

Qualifications

• Bachelor's degree in a related field or equivalent professional experience.
• 3+ years of experience supporting privacy, data protection, or regulated data governance programs.
• Working knowledge of privacy concepts including personal information, PHI, data processing agreements, transfers, DSRs, and data flow documentation.
• Experience reviewing privacy or security terms in vendor agreements or client contracts.
• Familiarity with HIPAA, GDPR/UK GDPR, U.S. state privacy laws, NIST, ISO 27001, NIST 800-171, or CMMC.
• Strong writing, organization, and stakeholder management skills.
• Privacy, security, or risk certifications preferred.

Responsibilities

• Support the firm's privacy program including meeting coordination, materials, follow-up, and governance documentation.
• Review and negotiate DPAs, data transfer terms, privacy clauses in client agreements and guidelines.
• Assess vendors and software tools for privacy data handling as part of third-party risk management.
• Complete client privacy and AI assessments with internal stakeholders.
• Manage privacy processes including data subject requests, cookies, notices, and policy maintenance.
• Lead governance for PHI, CUI, HIPAA and related regulatory data, including risk assessments and audits.
• Advise on handling of highly sensitive matters and data access controls.
• Translate privacy requirements into practical guidance for internal teams.

Skills

Privacy concepts

Stakeholder management

Written communication

Regulatory knowledge

Education

Bachelor's degree or equivalent

Tools

OneTrust

Job description

King & Spalding LLP seeks a Privacy & Data Protection Analyst to advance the firm's privacy program. You will collaborate with Information Security, Legal, and business stakeholders to govern, protect, and responsibly use personal information, including PHI and CUI, across regulated data types.

You will coordinate privacy governance, review DPAs and data transfer terms, and support assessments and questionnaires to demonstrate controls, ensuring client confidence in data protection practices.