Privacy Counsel

A law firm is seeking a Privacy Counsel to join its Philadelphia, PA office. The ideal candidate will be responsible for reviewing global vendor contracts, conducting due diligence, and assessing vendor engagements with a focus on privacy and data protection. This role involves drafting, reviewing, and negotiating third-party vendor agreements, maintaining privacy standards, and collaborating with various business functions to manage privacy risks effectively. The candidate should have 5+ years of experience in contract review and privacy advisory, with strong knowledge of global data privacy laws.

Duties and Responsibilities:

• Review, draft, and negotiate third-party vendor agreements, including privacy terms and controls such as data processing, data transfer, and business associate agreements.
• Conduct due diligence and risk assessments related to vendor engagements, focusing on privacy and data protection.
• Improve and maintain the firm’s standard privacy agreements and legal processes.
• Proactively work with internal clients to enhance privacy aspects of the contract negotiation process.
• Advise internal teams on minimizing privacy risks while balancing business interests.
• Collaborate with Information Security and Procurement Services teams to manage vendor contracts and perform associated due diligence.
• Conduct privacy impact assessments and monitor risk mitigation measures.
• Support the General Counsel’s Privacy Office (GCPO) with global privacy projects and initiatives.
• Stay current with applicable and emerging global data privacy and security laws, including HIPAA, CCPA, GDPR, and other U.S. and international privacy laws.
• Provide guidance and training to internal teams on privacy-related issues and compliance requirements.

Requirements:

• Juris Doctor (J.D.) degree from an accredited law school.
• Member in good standing of a U.S. state bar.
• 5+ years of experience in contract review and privacy advisory, with a focus on vendor agreements and privacy compliance.
• Strong knowledge of global data privacy laws, including HIPAA, CCPA, GDPR, and other U.S. and international privacy regulations.
• Data privacy certifications (e.g., CIPP, CIPM) are a plus.
• Excellent drafting, negotiation, and analytical skills.
• Proven ability to work collaboratively with internal stakeholders and manage multiple projects simultaneously.
• Strong attention to detail and ability to identify and mitigate privacy risks.
• Effective communication skills and the ability to provide clear, actionable advice.

This is one of the top law firms in the country to work forin its huge Philadelphia office, this firm draws rave reviews. Although much more a large firm atmosphere than most of the East Coast (non-New York) based firms, this firm has one of the most exciting full service practices around. However, it is not easy to get in with this fairly elite group of attorneys--they are very picky about their candidates. The culture here is fairly competitive--although the partners take care of their own, this is a group of high powered professionals who are used to acheiving at very high levels--and used to beating out the guy next door. This internal drive will keep associates staying later and later to earn bragging rights on occasion--but it's not as if the work isn't abundant enough to keep you there.