Overview
This role supports the legal team of a financial services organization with privacy and data protection matters on a fully remote basis for 20–40 hours per week. Engagement is an initial three-month contract, with the possibility of extension.
Responsibilities span privacy compliance and program support, including vendor contracting, records of processing activities, and maintenance of privacy policies and notices.
Responsibilities
- Review, draft, and negotiate vendor contracts, including AI terms and data processing agreements (DPAs)
- Prepare, analyze, and maintain records of processing activities (ROPAs) using information gathered from vendor Trust Centers and/or vendor risk assessments
- Review, draft, and update privacy policies and privacy notices
- Support the organization’s broader privacy management program
Requirements
- 5+ years of experience in privacy and data protection law, in a law firm or in-house setting
- Privacy management experience, including contract review of AI terms and DPAs
- Experience conducting ROPA analysis based on vendor Trust Center information and/or vendor risk assessments
- Experience reviewing and drafting privacy policies and privacy notices
Preferred Qualifications
- Financial industry experience
- International privacy experience in Canada, the UK, or Australia
Compensation & Benefits
- Pay (annualized, full-time basis): $124,000 to $187,200
- Contract pay is based on multiple factors, including (but not limited to) work experience, qualifications, credentials, location, market supply/demand, and the candidate’s preference.
Benefits (for eligible contract engagements and employees working 20+ hours/week):
- Complimentary professional liability insurance coverage for work or acts/omissions provided within the scope of an authorized engagement
- Group medical, dental, and vision insurance
- Complimentary group life, LTD, and AD&D insurance
- Qualified 401k plan
- For Benefits-eligible Attorneys: CLE and Professional Expense stipend
Location
Remote
Confidentiality
Candidates will not be proposed to prospective clients without prior consent. Selected candidates for further consideration will be contacted.