Assistant General Counsel – Data Regulation, Privacy, Security & Governance

Cooley LLP

. Develop, lead, and maintain the firm’s legal strategy for data regulation, privacy, data security, data governance, and data protection .

Posted 9/22/2026full-timeUnited StatesMid-LevelSenior💰 $240,000 - $300,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates advanced knowledge of privacy and data governance frameworks, including GDPR compliance and U.S. data protection laws. Capable of advising on data regulation, conducting risk assessments, and collaborating effectively with cross-functional teams.

Highest-signal resume keywords

Data Protection ExpertiseGDPR CompliancePrivacy Policy DevelopmentRisk Assessment ExperienceCybersecurity Knowledge

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Data GovernancePrivacy LawData SecurityContract NegotiationRecords ManagementData Processing AgreementsCompliance MonitoringIncident ResponseData Inventory ManagementCross-Border Data Transfers

Soft Skills

Excellent CommunicationOrganizational SkillsSound Professional JudgmentAccountabilityCollaboration

Tools & Technologies

Microsoft Office SuiteIManageData Governance Frameworks

Certifications & Qualifications

CIPP/USCIPP/ECIPT

Industry Keywords

Data RegulationPrivacy GovernanceU.S. Export Control RegulationsVendor OversightData Subject Requests

Tech Stack

Tools & technologies

Cyber Security

About the role

Key responsibilities & impact

Develop, lead, and maintain the firm’s legal strategy for data regulation, privacy, data security, data governance, and data protection
Advise the firm on data regulation and governance issues spanning privacy, data security, records retention and disposition, data inventories and maps, cross-border transfers, data subject requests, and lawful data use
Work closely with the Chief Security & Technology Officer and Chief Innovation Officer on technology vendor data privacy
Prepare and update firm privacy and data governance policies and procedures, including GDPR and U.S. state privacy law compliance
Maintain public-facing notices reflecting current legal and firm practices
Provide privacy input on business projects and initiatives
Improve governance frameworks for client and firm data, including client file handling and retention and records and information management
Support incident preparedness and response for privacy and data security events, including investigation, containment, remediation, notifications, and post-incident improvement
Act as cybersecurity subject matter expert in collaboration with the cybersecurity technology team
Draft, review, and negotiate data-related terms in client and vendor contracts, including data processing and transfer agreements, privacy clauses, and security addenda
Align contracts, procurement initiatives, and sourcing strategies with the firm’s legal, privacy, data security, and risk management priorities
Perform or oversee privacy and data protection risk assessments, including PRAs and DPIAs
Coordinate compliance monitoring and audits of higher-risk vendors and third parties processing personal data
Monitor evolving laws, regulations, standards, and enforcement trends and recommend appropriate actions
Develop and deliver training and communications to attorneys, paralegals, and business professionals
Collaborate with department representatives and firm leaders on procurement initiatives, sourcing strategies, and data-intensive projects
Identify and escalate risks in business transactions and operational processes
Document negotiation positions and potential conflicts to minimize disputes and advance firm objectives
Perform all other duties as assigned or required

Requirements

What you’ll need

After orientation at Cooley LLP, exhibit proficiency in the Microsoft Office suite, iManage and other firm applications
Ability to work extended and/or weekend hours, as required
Ability to travel, as required
JD from an ABA accredited law school
Active member in good standing of the jurisdiction in which the attorney is resident and the jurisdiction of the Cooley office to which the attorney is assigned
Substantial experience advising on data protection, privacy, and governance, including direct experience with U.S. export control regulations and data privacy/protection laws in the U.S., Europe, and Asia
6+ years of relevant experience, preferably as a practicing attorney
Advanced knowledge of privacy and data governance frameworks
Experience drafting and operationalizing privacy and data policies
Depth in technology and commercial contracting, particularly with data processing/transfer agreements and privacy/security provisions
Advanced knowledge of GDPR
Preferred: experience with risk assessments, compliance monitoring, and vendor oversight in privacy, as well as incident response and regulatory engagement
Preferred: expertise in cybersecurity
Preferred: certifications such as CIPP/US, CIPP/E, or CIPT
Excellent communication and organizational skills
Strong sense of accountability
Ability to analyze needs and determine priorities based on business objectives in a fast-paced environment
Sound professional judgment and ability to translate complex legal requirements plainly for non-legal audiences
Effective collaboration across global, cross-functional stakeholders

Benefits

Comp & perks

Medical
Health savings account (with applicable medical plan)
Dental
Vision
Health and/or dependent care flexible spending accounts
Pre-tax commuter benefits
Life insurance
AD&D
Long-term care coverage
Backup care for children and/or adults
Other parental support benefits
Firm-paid life insurance
Firm-paid AD&D
LTD
Short term medical benefits
20 days of vacation
10 days of sick leave
10 paid holidays each year
Generous parental leave
Fertility benefits
Hybrid schedule with in-office and work-from-home days