Greenberg Traurig (GT), a global law firm, has an exciting opportunity for a junior/mid-level privacy lawyer in the Cybersecurity, Privacy & Crisis Management Group of its San Francisco office. We are looking for a whip-smart, personable associate who lives and breathes privacy, is dedicated to providing clients with top-notch legal services, and who is ready take the next step in their career and collaborate with experienced data protection partners on cutting edge privacy and security issues. While the position is based in San Francisco, GT’s footprint will provide this associate the opportunity to work with clients, large and small, from variety of industries located throughout the United States on privacy and security issues.
- Admission to practice law in California with excellent academic credentials;
- 3+ years of law firm and/or in-house experience including at least 2 years specializing in data protection matters;
- A sophisticated understanding of how web technologies work;
- Knowledge of and experience assisting companies develop global privacy programs, and with compliance with GDPR, ePrivacy Directive, HIPAA, GLBA, CCPA, UK Data Protection Regulation, Japan Data Protection Regulation and other global privacy laws and regulations;
- Superior writing ability, strong work ethic, good communication skills, comfort with ambiguity and outstanding interpersonal skills;
- A strong working knowledge of privacy and data security laws on a federal and state level relating to the healthcare and financial industry;
- Experience drafting and negotiating professional services agreements, technology licenses, and other types of commercial agreements involving data sharing;
- Strong analytical and critical thinking skills with strong attention to detail and accuracy;
- Experience drafting and revising privacy notices, incident response plans, information security policies and other data protection policies;
- Willingness and desire to learn;
- Prefer experience responding to security Incidents and/or data breaches, advising on emarketing issues, assessing data protection programs in M&As, responding to CIDs, and providing advice on privacy by design/default in relation to product development (preferred); and
- Prefer Certified Information Privacy Professional (US and/or EU).