Strategic Privacy & Data Protection Analyst

King & Spalding; Atlanta (GA); On-site; USD 90,000 - 120,000; Full time

Benefits offered by this job

Health and wellness plan

Life and disability insurance

Flexible spending accounts

Health savings account

401(k) plan

Profit sharing plan

Paid Time Off

Job summary

King & Spalding is seeking a Privacy & Data Protection Analyst to mature the firm’s privacy program. You will work with Information Security, Legal, and business stakeholders to govern, protect, and responsibly use personal information including client data, employee HR data, PHI, and CUI.

You will coordinate Privacy Committee activities, review DPAs and data transfer terms, and support third-party risk management.

Qualifications

• Bachelor’s degree or equivalent professional experience.
• 3+ years supporting privacy, data protection, or regulated data governance programs.
• Knowledge of privacy concepts: personal data, PHI, DPAs, data transfers, notices, and data flow docs.
• Experience reviewing privacy or security terms in vendor/client contracts.
• Familiarity with HIPAA, GDPR/UK GDPR, U.S. state privacy laws, NIST, ISO 27001, NIST 800-171, or CMMC.
• Strong writing, organization, and stakeholder management skills.
• Privacy/security/risk certifications (e.g., CIPP/US, CISSP) preferred.
• Experience in a law firm or professional services environment preferred.

Responsibilities

• Support the privacy program, including committee coordination, materials, and governance documentation.
• Review and negotiate DPAs, data transfer terms, client agreements, and AI-related data protection provisions.
• Assess how vendors collect, use, store, and protect sensitive information for third-party risk management.
• Complete client privacy and AI assessments with internal stakeholders to demonstrate controls.
• Manage data subject access requests, cookie/consent management, and privacy notice updates.
• Lead governance for HIPAA PHI and CUI, coordinating risk assessments and remediation efforts.
• Advise engagement teams on data handling for high-risk matters and sensitive data.
• Translate evolving privacy requirements into practical guidance for internal stakeholders.
• Own core privacy governance in OneTrust: ROPAs, PIAs/DPIAs, TIAs, and data flow docs.

Skills

Privacy knowledge

Stakeholder management

Writing

Attention to detail

Law firm experience

Education

Bachelor’s degree

3+ years privacy experience

Tools

OneTrust

Job description

King & Spalding is seeking a Privacy & Data Protection Analyst to mature the firm’s privacy program. You will work with Information Security, Legal, and business stakeholders to govern, protect, and responsibly use personal information including client data, employee HR data, PHI, and CUI.

You will coordinate Privacy Committee activities, review DPAs and data transfer terms, and support third-party risk management.