Privacy & Data Protection Strategist

King & Spalding; United States; On-site; USD 90,000 - 130,000; Full time

Benefits offered by this job

Health and wellness plan

Life and disability insurance

FSA & HSA

401(k) plan

Profit sharing

Paid time off

Job summary

King & Spalding seeks a Privacy & Data Protection Analyst to mature the firm’s privacy program. You will collaborate with Information Security, Legal, and stakeholders to govern and protect client data, HR data, PHI, and CUI.

The role emphasizes data protection, risk assessment, and practical privacy guidance across jurisdictions. You will own governance activities in OneTrust, help manage DPIAs/ROPAs, and coordinate privacy notices, training, and policy updates to maintain compliance and client

Qualifications

• Bachelor’s degree in a related field or equivalent professional experience.
• 3+ years of experience supporting privacy, data protection, or regulated data governance programs.
• Working knowledge of privacy and data protection concepts.
• Experience reviewing privacy or security terms in vendor agreements or client contracts.
• Familiarity with privacy frameworks such as HIPAA, GDPR/UK GDPR, NIST, ISO 27001, or CMMC.
• Strong writing, organization, and stakeholder management skills.

Responsibilities

• Support the firm’s privacy program, including committee coordination and governance documentation.
• Review and negotiate DPAs, data transfer terms, and privacy provisions in client agreements and guidelines.
• Assess how vendors and software tools collect, store, share, and protect sensitive information as part of third-party risk management.
• Complete client privacy and AI assessments and questionnaires with internal stakeholders.
• Manage data subject access request intake, tracking, and coordination; cookie and consent management; privacy notices and policy updates.

Skills

Privacy concepts

Stakeholder management

Writing skills

Attention to detail

Regulatory knowledge

HIPAA familiarity

GDPR familiarity

Education

Bachelor's degree

Job description

King & Spalding seeks a Privacy & Data Protection Analyst to mature the firm’s privacy program. You will collaborate with Information Security, Legal, and stakeholders to govern and protect client data, HR data, PHI, and CUI.

The role emphasizes data protection, risk assessment, and practical privacy guidance across jurisdictions. You will own governance activities in OneTrust, help manage DPIAs/ROPAs, and coordinate privacy notices, training, and policy updates to maintain compliance and client