Data Privacy and Cybersecurity Associate, Washington, DC · Magic Circle Firm

A leading global law firm with one of the nation's top data privacy and cybersecurity practices seeks a mid-level associate with 3-5 years of experience. You'll develop expertise at the intersection of privacy regulatory law and health care and life sciences, supporting major pharmaceutical companies, device manufacturers, health systems, payers, and health technology firms.

The work:

• Develop and enhance privacy compliance programs meeting HIPAA, GINA, state health privacy laws, and state AI and consumer data privacy requirements
• Advise clients on privacy compliance governance, risk assessments, and third-party risk management
• Analyze regulatory requirements and implications of data uses and data flows
• Negotiate privacy agreements including business associate agreements, data use agreements, and AI-related agreements
• Support clients on privacy issues in product development, clinical trials, AI model training, and commercial transactions
• Manage discrete workstreams and participate in client calls and deliverables

What they're looking for:

• 3-5 years of privacy, technology regulatory, or related legal experience (law firm, government, or in-house backgrounds welcome)
• Strong academic credentials and excellent research and writing skills
• Experience supporting privacy compliance in health care and life sciences strongly preferred
• Familiarity with HIPAA, GINA, state health privacy laws, and state consumer health data privacy laws
• Ability to manage multiple competing deadlines and work collaboratively
• Membership in or eligibility for the DC Bar