Data Privacy and Cybersecurity Mid-Level Associate, District of Columbia · Vault Top 15 Firm

A top-tier firm's privacy and cybersecurity practice advises major industry clients spanning technology, financial services, healthcare, and manufacturing on risk management, incident response, and regulatory compliance.

The work:

• Cybersecurity incident response support, including fact-gathering, legal analysis, threat actor coordination, and multi-jurisdictional breach notification obligations
• Regulatory interaction and strategy following incidents, including investigation support and notification timelines
• Incident preparedness, including policy and playbook development, tabletop exercises, and readiness assessments
• Privacy compliance program enhancement, including governance structure, risk assessment, and vendor management
• Cybersecurity and privacy regulatory analysis, including NIST framework application and sector-specific requirements
• Client counsel on privacy issues in product development, commercial transactions, and cross-border data flows
• Direct client engagement on deliverables and presentations

What they're looking for:

• 2-4 years in cybersecurity, privacy, technology regulatory work, or incident response (law firm, government, or in-house)
• Strong research, writing, and communication skills
• D.C. Bar admission or eligibility
• Prior incident response or breach notification experience preferred
• Knowledge of cybersecurity frameworks and privacy regulations
• Ability to manage competing deadlines and work cross-functionally