Data Privacy & Cybersecurity Associate

Location: New York, NY / Boston, MA / Washington, DC / Multiple US Offices

A highly regarded national law firm is seeking a Data Privacy & Cybersecurity Associate to join its growing practice. This opportunity offers exposure to sophisticated domestic and international clients across financial services, healthcare, technology and other regulated industries. The successful candidate will advise on complex privacy compliance, cybersecurity incident response, data governance and regulatory matters, working closely with experienced practitioners in a collaborative environment. The firm offers a hybrid working arrangement, with two days working remotely each week, alongside excellent opportunities for professional development and progression. Candidates should have 3–6 years of relevant experience, ideally gained within a reputable law firm, with a strong understanding of US state privacy legislation, GDPR and federal privacy regulations, including HIPAA and GLBA. Experience drafting and negotiating data processing agreements, advising on cookies and tracking technologies, and managing cybersecurity incidents involving data breaches, ransomware and regulatory notifications is particularly desirable. Additional expertise in privacy and cybersecurity due diligence, vendor risk management, cross-border data transfers, regulatory investigations and engagement with government authorities would be advantageous. Excellent academic credentials, strong drafting and analytical skills, and admission to the relevant state bar are required. Candidates with experience advising clients across multiple jurisdictions and handling complex, time-sensitive cybersecurity matters are particularly encouraged to apply. #TPOPS