> Markdown version of [/jobs/ext/3892050-data-privacy-and-cybersecurity-associate-attorney](https://www.wearedevelopers.com/jobs/ext/3892050-data-privacy-and-cybersecurity-associate-attorney). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Data Privacy and Cybersecurity Associate Attorney

- **Company:** BCG Attorney Search
- **Location:** New York, NY, United States (Remote available)
- **Experience:** Experienced
- **Contract:** Temporary contract
- **Skills:** Cyber Security, Data Governance, Data Processing
- **Published:** October 23, 2026
- **Apply:** https://www.employmentcrossing.com/job/id-c27061268710ae278b91478cf32aeb8d

## About the Role

A law firm seeks a Data Privacy and Cybersecurity Associate Attorney in New York City. The ideal candidate will have 3-6 years of experience in data privacy and cybersecurity, advising clients on privacy compliance, cybersecurity incident response, data governance, and related regulatory matters., * 3-6 years of data privacy and cybersecurity experience.

 * Excellent drafting, written, and verbal communication skills.
 * Strong legal research, analytical, and technical skills.
 * Proven ability to manage complex matters with accuracy and attention to detail.
 * Ability to work independently and collaboratively.
 * Admission to the bar in the jurisdiction of residence, in good standing., * Juris Doctor (JD) degree from an accredited law school., * Strong analytical and problem-solving skills.
 * Excellent organizational and multitasking abilities.
 * Proficiency in legal research and writing.

## Description

* Advise clients on privacy compliance and regulatory matters, including U.S. state privacy laws, GDPR, and federal privacy laws.
 * Draft, review, and negotiate privacy policies and data processing agreements.
 * Provide guidance on the use of cookies and tracking technologies.
 * Manage cybersecurity and incident response matters, including breach response and regulator engagement.
 * Support time-sensitive cybersecurity incidents, requiring availability outside regular hours.
 * Engage in data governance and information risk management.
 * Conduct privacy and cybersecurity due diligence.
 * Counsel clients in regulatory investigations and non-litigation administrative matters.