INFORMATION TECH - PRIVACY + CYBER, INCIDENT RESPONSE | MID-LEVEL ASSOCIATE (4–6 YRS): Our client, a boutique firm, is seeking a mid-level Associate to join its Privacy + Cyber practice. 

This opportunity is well suited for an attorney with substantial experience managing cybersecurity incidents and advising clients on privacy compliance. The successful candidate will play a leading role in all phases of the incident response lifecycle, partnering with clients, forensic investigators, insurers, and regulatory authorities to deliver strategic, business-focused legal counsel. In addition to incident response work, the associate will advise clients on privacy compliance, data governance, and proactive risk management initiatives.

The Incident Response Associate will oversee cybersecurity incident investigations, including leading scoping calls, coordinating with forensic consultants, directing data review and analysis efforts, and managing third-party experts as necessary. Responsibilities also include working closely with cyber insurance carriers and insureds, communicating with law enforcement agencies, regulators, and other stakeholders throughout the response process, and counseling clients on privacy compliance, pre-incident preparedness, data governance, and emerging privacy issues. The associate will also assist clients in developing defensible legal and regulatory strategies following security incidents.

REQUIREMENTS: Candidates must have 4–6 years of meaningful experience in incident response, privacy counseling, and regulatory compliance. Applicants should have demonstrated experience managing cybersecurity incidents from initial response through resolution, collaborating with forensic experts and insurance carriers, advising on privacy compliance programs, and counseling clients on data governance and incident preparedness. Strong analytical, organizational, and communication skills are essential, along with the ability to independently manage client relationships and oversee multiple matters simultaneously. Experience with healthcare or financial services clients is a plus, as are CIPP, CIPM, or other privacy-related certifications. Candidates must be admitted and in good standing in the jurisdiction where they intend to practice.

TO APPLY: Please submit a resume, cover letter, and academic transcripts in PDF format.