Data Privacy Cybersecurity amp AI Attorney

• Assist companies in building or scaling privacy programs and provide compliance guidance regarding U.S. federal and state privacy laws, GDPR, and other global standards.
• Draft and revise privacy notices, terms of service, incident response plans, information security policies, and other data protection policies.
• Provide strategic advice on tracking technologies, prepare Data Protection Impact Assessments (DPIAs), and offer product counseling.
• Negotiate and draft professional services agreements, vendor agreements, data processing agreements, and cross-border transfer agreements.
• Develop and refine AI governance programs, including drafting internal/external AI policies, advising on AI use cases, and performing AI risk assessments.
• Respond to regulatory requests and formal investigations from agencies such as the FTC, state Attorneys General, and international data protection authorities.
• Lead and negotiate all phases of privacy and security-related due diligence in mergers, acquisitions, and similar corporate transactions.
• Drive data breach preparation, risk mitigation, coordination, and response efforts.

A law firm seeks a highly motivated, business-minded attorney with 3-6 years of experience to join the Data Privacy & Cybersecurity Practice in San Francisco. This role involves providing legal advice and risk-based evaluations on complex, cutting-edge privacy, AI, and cybersecurity issues for sophisticated clients., * J.D. from an accredited law school and in good standing with the California State Bar.

• 3+ years of legal experience, including substantive data privacy experience and in-depth knowledge of U.S. and EU privacy and AI laws.
• Prior law firm experience is required.
• Strong professional judgment, excellent communication skills, and the ability to manage multiple tasks.
• Ability to supervise junior attorneys to ensure deadlines are met.

Education

• J.D. from an accredited law school.

Certifications

• IAPP CIPP certification (U.S. and EU) is strongly preferred.
• AIGP certification is a plus.

Skills

• Practical problem-solving with superior writing and communication skills.
• Comfortable navigating regulatory ambiguity and translating legal requirements into actionable advice.
• Working knowledge of CCPA, various state comprehensive privacy laws, CIPA, HIPAA, FCRA, GLBA, TCPA, CAN-SPAM, COPPA, ROSCA, and GDPR.
• Familiarity with the inner workings of the Internet, online tracking technologies, opt-in/opt-out standards, and cookie compliance.
• Knowledgeable about privacy and AI regulatory compliance programs with a proven record of starting or iterating such programs.
• Inquisitive mindset with the ability to learn about new technologies and laws in a fast-paced environment.
• Additional consideration for sector-specific experience in financial services, children’s privacy, telecom, biometrics, consumer health data, genetics, or digital advertising.

• Discretionary bonus.
• Health insurance with an optional HSA.
• Short term disability and long term disability.
• Dental insurance and vision care.
• Life insurance.
• Healthcare and Dependent Care Flexible Spending Accounts.
• 401K.
• Vacation and sick time.
• Employee assistance program.
• Voluntary accident insurance, voluntary life, voluntary disability, voluntary critical illness and cancer insurance, and pet insurance.
• Commuter and Transit programs (where available).