Privacy Counsel

Profile

A law firm is seeking a Privacy Counsel to join its Philadelphia, PA office. The ideal candidate will be responsible for reviewing global vendor contracts, conducting due diligence, and assessing vendor engagements with a focus on privacy and data protection. This role involves drafting, reviewing, and negotiating third-party vendor agreements, maintaining privacy standards, and collaborating with various business functions to manage privacy risks effectively. The candidate should have 5+ years of experience in contract review and privacy advisory, with strong knowledge of global data privacy laws.

Duties and Responsibilities:

• Review, draft, and negotiate third-party vendor agreements, including privacy terms and controls such as data processing, data transfer, and business associate agreements.
• Conduct due diligence and risk assessments related to vendor engagements, focusing on privacy and data protection.
• Improve and maintain the firm’s standard privacy agreements and legal processes.
• Proactively work with internal clients to enhance privacy aspects of the contract negotiation process.
• Advise internal teams on minimizing privacy risks while balancing business interests.
• Collaborate with Information Security and Procurement Services teams to manage vendor contracts and perform associated due diligence.
• Conduct privacy impact assessments and monitor risk mitigation measures.
• Support the General Counsel’s Privacy Office (GCPO) with global privacy projects and initiatives.
• Stay current with applicable and emerging global data privacy and security laws, including HIPAA, CCPA, GDPR, and other U.S. and international privacy laws.
• Provide guidance and training to internal teams on privacy-related issues and compliance requirements.

Requirements:

• Juris Doctor (J.D.) degree from an accredited law school.
• Member in good standing of a U.S. state bar.
• 5+ years of experience in contract review and privacy advisory, with a focus on vendor agreements and privacy compliance.
• Strong knowledge of global data privacy laws, including HIPAA, CCPA, GDPR, and other U.S. and international privacy regulations.
• Data privacy certifications (e.g., CIPP, CIPM) are a plus.
• Excellent drafting, negotiation, and analytical skills.
• Proven ability to work collaboratively with internal stakeholders and manage multiple projects simultaneously.
• Strong attention to detail and ability to identify and mitigate privacy risks.
• Effective communication skills and the ability to provide clear, actionable advice.

Company info

BCG Attorney Search
125 Park Avenue, 25th floor
New York
New York
United States 10017
Phone : (212) 232-0277
Fax : (213) 895-7306