Overview
An organization is seeking an experienced Privacy Attorney to support an established client privacy program. This role involves hands-on support across a range of privacy operational and legal activities, including managing data subject requests, conducting privacy impact assessments, performing vendor privacy reviews, responding to privacy questionnaires, handling data processing agreements, managing privacy documentation, and ensuring regulatory readiness.
The attorney will collaborate closely with the client's privacy and compliance teams and will have regular direct interaction with the client's Vice President of Compliance. The ideal candidate will possess strong substantive privacy experience along with the judgment, communication skills, and professionalism necessary to operate independently in a senior client-facing environment.
Responsibilities
- Manage and support Data Subject Access Requests (DSARs) and other data subject rights requests.
- Conduct and support Privacy Impact Assessments (PIAs) and Data Protection Impact Assessments (DPIAs).
- Perform vendor and third-party privacy reviews and assessments.
- Review and respond to privacy and data protection questionnaires.
- Provide support with Data Processing Agreements (DPAs) and related privacy contractual requirements.
- Provide guidance on privacy requirements under GDPR, CCPA/CPRA, and other applicable U.S. and global privacy frameworks.
- Support privacy documentation management and regulatory readiness activities.
- Develop, update, and maintain privacy playbooks, workflows, standard operating procedures, templates, and other program documentation.
- Identify privacy risks and escalate complex or sensitive matters as appropriate.
- Work directly with the client's Vice President of Compliance and other senior stakeholders on privacy matters, priorities, and escalations.
- Manage assigned matters independently while meeting established service levels and turnaround expectations.
Service Level Expectations
- Standard DSARs and routine privacy reviews: 1-2 business days
- Complex assessments and escalations: 2-4 business days
Requirements
- J.D. or equivalent law degree.
- Strong experience in privacy, data protection, and/or privacy compliance.
- Working knowledge of GDPR and CCPA/CPRA.
- Experience handling DSARs, PIAs/DPIAs, vendor privacy reviews, privacy questionnaires, and/or DPAs.
- Ability to independently manage privacy matters and identify when escalation is required.
- Strong written and verbal communication skills.
- Demonstrated ability to interact effectively with senior client stakeholders and executives.
- Highly organized with the ability to manage multiple matters and short turnaround requirements.
- U.S.-based and able to support the client during applicable U.S. business hours.
Preferred Qualifications
- CIPP certification, particularly CIPP/US and/or CIPP/E.
- Experience supporting an in-house privacy or compliance function.
- Experience working directly with senior privacy, legal, or compliance leadership.
- Experience developing or maintaining privacy playbooks, SOPs, workflows, and operational processes.
- Experience supporting global privacy programs and additional international privacy frameworks.
Ideal Candidate Profile
The successful candidate will be a practical, business-minded privacy professional comfortable taking ownership of day-to-day privacy matters without significant supervision. This individual should be able to distinguish routine operational matters from issues requiring escalation, communicate clearly with senior stakeholders, and provide responsive, commercially practical privacy support.
Executive presence and client relationship skills are particularly important due to regular direct interaction with the client's Vice President of Compliance.
Location
- U.S.-based, with availability to support the client during applicable U.S. business hours.
Compensation & Benefits
Details regarding compensation and benefits were not provided in the original description.