> Markdown version of [/jobs/ext/3890557-data-privacy-cybersecurity-amp-ai-attorney](https://www.wearedevelopers.com/jobs/ext/3890557-data-privacy-cybersecurity-amp-ai-attorney). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Data Privacy Cybersecurity amp AI Attorney

- **Company:** BCG Attorney Search
- **Location:** San Francisco, CA, United States
- **Experience:** Experienced
- **Contract:** Voluntary work
- **Skills:** Artificial Intelligence, Biometrics, Cyber Security, Data Processing
- **Published:** October 23, 2026
- **Apply:** https://www.employmentcrossing.com/job/id-3e56bf0cc5481225a9bfdc6d418f0fd1

## About the Role

A law firm seeks a highly motivated, business-minded attorney with 3-6 years of experience to join the Data Privacy & Cybersecurity Practice in San Francisco. This role involves providing legal advice and risk-based evaluations on complex, cutting-edge privacy, AI, and cybersecurity issues for sophisticated clients., * J.D. from an accredited law school and in good standing with the California State Bar.

 * 3+ years of legal experience, including substantive data privacy experience and in-depth knowledge of U.S. and EU privacy and AI laws.
 * Prior law firm experience is required.
 * Strong professional judgment, excellent communication skills, and the ability to manage multiple tasks.
 * Ability to supervise junior attorneys to ensure deadlines are met.

Education

 * J.D. from an accredited law school.

Certifications

 * IAPP CIPP certification (U.S. and EU) is strongly preferred.
 * AIGP certification is a plus.

Skills

 * Practical problem-solving with superior writing and communication skills.
 * Comfortable navigating regulatory ambiguity and translating legal requirements into actionable advice.
 * Working knowledge of CCPA, various state comprehensive privacy laws, CIPA, HIPAA, FCRA, GLBA, TCPA, CAN-SPAM, COPPA, ROSCA, and GDPR.
 * Familiarity with the inner workings of the Internet, online tracking technologies, opt-in/opt-out standards, and cookie compliance.
 * Knowledgeable about privacy and AI regulatory compliance programs with a proven record of starting or iterating such programs.
 * Inquisitive mindset with the ability to learn about new technologies and laws in a fast-paced environment.
 * Additional consideration for sector-specific experience in financial services, children's privacy, telecom, biometrics, consumer health data, genetics, or digital advertising.

## Description

* Assist companies in building or scaling privacy programs and provide compliance guidance regarding U.S. federal and state privacy laws, GDPR, and other global standards.
 * Draft and revise privacy notices, terms of service, incident response plans, information security policies, and other data protection policies.
 * Provide strategic advice on tracking technologies, prepare Data Protection Impact Assessments (DPIAs), and offer product counseling.
 * Negotiate and draft professional services agreements, vendor agreements, data processing agreements, and cross-border transfer agreements.
 * Develop and refine AI governance programs, including drafting internal/external AI policies, advising on AI use cases, and performing AI risk assessments.
 * Respond to regulatory requests and formal investigations from agencies such as the FTC, state Attorneys General, and international data protection authorities.
 * Lead and negotiate all phases of privacy and security-related due diligence in mergers, acquisitions, and similar corporate transactions.
 * Drive data breach preparation, risk mitigation, coordination, and response efforts.