Remote Legal Counsel - Data Privacy & Cybersecurity

Placements24; United States; Remote; USD 150,000 - 230,000; Full time

Benefits offered by this job

Competitive remote salary

Health insurance

Stock options

Retirement plan

Professional development budget

Flexible hours

Home office stipend

Equity grants

Bonuses based on performance

Global network access

Job summary

Placements24 is seeking a Remote Legal Counsel focused on Data Privacy and Cybersecurity to join a global legal team. The role involves developing privacy strategies, guiding DPIAs, and ensuring compliance with GDPR, POPIA, and CCPA in a remote-first environment.

The ideal candidate is an experienced attorney with 6+ years in technology law, proficient in negotiating DPAs and data breach responses, and capable of collaborating with engineering and security teams across time zones.

Qualifications

• 6+ years as an attorney focused on data privacy, cybersecurity, and technology law.
• PoPIA, GDPR, CCPA expertise or experience.
• Experience developing privacy programs and handling data breaches.
• Strong negotiation, analytical, and problem-solving skills.
• Ability to work autonomously in a remote setting across time zones.
• CIPP/E, CIPP/US or similar privacy certifications are a strong asset.

Responsibilities

• Develop, implement, and maintain global data privacy policies, procedures, and notices.
• Advise on compliance with POPIA, GDPR, CCPA, and other privacy regulations.
• Conduct DPIAs/PIAs for new products and services.
• Manage DSARs and other data privacy rights requests.
• Develop and execute incident response plans for data breaches and cybersecurity incidents.
• Negotiate DPAs and other data-related contracts with vendors.
• Collaborate with engineering, product, and security teams to embed privacy by design.
• Stay current on evolving global privacy and cybersecurity laws.
• Provide privacy and cybersecurity training for employees.
• Advise on cross-border data transfers and international privacy compliance.

Skills

Data privacy

Cybersecurity

Tech law

Negotiation

Regulatory compliance

Remote work

Job description

About the Role

Our client, a cutting-edge technology company, is seeking a dedicated Remote Legal Counsel specializing in Data Privacy and Cybersecurity to bolster their global legal team. This is a fully remote position, offering a unique opportunity for a motivated legal professional to work from anywhere. You will be instrumental in developing and implementing comprehensive data privacy strategies and ensuring the company's robust cybersecurity posture aligns with global legal and regulatory requirements, including POPIA, GDPR, and CCPA. The role involves advising on data protection impact assessments, managing data breach responses, and negotiating data processing agreements. The ideal candidate is proactive, deeply knowledgeable about data privacy laws, and thrives in a dynamic, remote-first environment. You will collaborate closely with engineering, product, and security teams to embed privacy and security by design.

Key Responsibilities

• Develop, implement, and maintain the company's global data privacy policies, procedures, and notices.
• Advise on compliance with data protection laws such as POPIA, GDPR, CCPA, and other relevant privacy regulations.
• Conduct Data Protection Impact Assessments (DPIAs) and Privacy Impact Assessments (PIAs) for new products, services, and initiatives.
• Manage and respond to data subject access requests (DSARs) and other data privacy rights requests.
• Develop and execute incident response plans for data breaches and cybersecurity incidents.
• Provide legal guidance on cybersecurity best practices and risk mitigation strategies.
• Negotiate data processing agreements (DPAs) and other data-related contractual clauses with third-party vendors.
• Collaborate with internal teams (engineering, product, security, marketing) to ensure privacy and security are integrated into all aspects of the business.
• Stay abreast of evolving global data privacy and cybersecurity laws and regulations.
• Conduct privacy and cybersecurity training for employees.
• Advise on cross-border data transfers and international privacy compliance.

Requirements

• Admitted attorney with a minimum of 6 years of experience focused on data privacy, cybersecurity, and technology law, preferably gained in a technology company or a leading law firm.
• Demonstrated expertise in South African POPIA, EU GDPR, and US data privacy laws (e.g., CCPA).
• Experience in developing and implementing privacy programs and handling data breaches.
• Strong understanding of cybersecurity principles and technologies.
• Excellent negotiation, analytical, and problem-solving skills.
• Exceptional written and verbal communication skills, capable of explaining complex legal concepts to technical and non-technical audiences.
• Proven ability to work autonomously and manage workload effectively in a remote setting.
• CIPP/E, CIPP/US, or similar privacy certifications are a strong asset.
• Experience advising on AI, cloud computing, and emerging technologies is highly desirable.
• Ability to work collaboratively across different time zones and cultures.

Benefits

• Highly competitive remote salary.
• Comprehensive health, dental, and vision insurance.
• Generous stock options or equity grants.
• Contribution to a retirement savings plan.
• Substantial budget for professional development, including conferences and certifications.
• Flexible working hours and the ability to work from anywhere accessible to the company.
• Opportunity to shape the privacy and security legal framework of a leading tech firm.
• Performance-based bonuses.
• Home office setup stipend.
• Access to a global network of colleagues and industry experts.