Privacy & Commercial Contracts Attorney

Overview

This role is a fully remote, full-time direct hire position for an experienced Privacy & Commercial Contracts Attorney. Candidates may be located anywhere in the U.S., but must be reasonably available during West Coast business hours.

Work focuses on contract drafting, redlining, and negotiation—particularly technology and vendor agreements—with privacy and data security terms at the center of the work. Financial services industry experience is not required; proven contract and privacy depth is the priority.

Responsibilities

• Draft, redline, and negotiate technology vendor agreements for credit unions and banks, including SaaS, hosted platforms, cloud services, licensing, fintech partnerships, payment systems, and outsourcing arrangements.
• Serve as the primary negotiator with sophisticated vendor and fintech legal teams, leading deals from first draft through execution.
• Advise clients on contract risk allocation, including indemnities, limitation of liability, SLAs, termination rights, audit rights, data use, and transition/exit provisions.
• Evaluate how vendor products are structured (hosted vs. on-prem; proprietary vs. licensed; integration points; data flows) and negotiate terms that reflect operational realities and client objectives.
• Draft and negotiate data processing addenda, information security exhibits, incident response provisions, and breach notification language.
• Issue-spot privacy and data security considerations (GLBA, CCPA, GDPR, and state privacy laws) within commercial agreements.
• Counsel clients on third-party risk management expectations and regulator-facing considerations.
• Advise on IP ownership and licensing in technology and fintech collaborations.
• Take on a growing share of privacy work while carrying a full contract workload.

Requirements

• Attorney with deep, hands-on experience drafting, redlining, and negotiating commercial agreements on behalf of clients, with strong emphasis on vendor and technology services contracts.
• Substantive contract depth matters more than years of experience; candidates with 3+ years of focused, hands-on contract work will be considered. The range extends to more senior attorneys.
• Proven privacy and data security experience, including negotiating data protection and security terms within commercial agreements (experience may come from any industry, including healthcare and SaaS). Familiarity with GLBA is a plus. IAPP CIPP/US certification is also a plus.
• Comfortable independently leading negotiations and making sound, practical judgment on which terms to press and which to concede.
• Commercially minded and able to advise business clients in real time.
• Interested in both heavy contract work and helping build out a privacy practice.
• Experience in financial services, fintech, or at a bank or credit union is a plus, but not required.
• Available during West Coast business hours and comfortable working fully remotely.
• Licensed to practice law in any U.S. state and in good standing.
• J.D. from an accredited law school.
• Outstanding references.

Compensation & Benefits

• Salary range: $160,000–$275,000, depending on experience, plus applicable bonuses.
• Profit sharing: Firm-funded profit sharing plan; the firm contributes 6–8% of compensation with no employee contribution required.
• Fully covered medical, vision, and dental coverage for the employee and their family.
• Life and disability insurance.
• Discretionary time away and paid sick time.

Location / Schedule

• Type of role: Permanent / direct hire
• Schedule: Full-time
• Location: Remote (United States)
• Availability requirement: Reasonably available during West Coast business hours