Associate Counsel - Privacy (REMOTE)

Description & Requirements

The Associate Counsel, Privacy is responsible for maintaining a comprehensive understanding of U.S.

federal, state, and global privacy laws to ensure the company's privacy compliance.

This role involves reviewing contracts, proposals, software requests, and agreements to identify privacy risks, drafting privacy assessments, and participating in breach investigations.

The Associate Counsel also supports the development of privacy statements, conducts audits, and provides training and guidance to internal stakeholders on privacy-related matters.

This position requires effective communication with various teams to mitigate risks and enhance privacy protocols.

Essential Duties and Responsibilities:

- Develop and maintain a working knowledge of US federal and state privacy and data protection laws and regulations.

- Develop and maintain awareness of global privacy and data protection laws that apply to the company and how they impact the company's privacy and data protection compliance posture.

- Develop a working knowledge of Artificial Intelligence legal landscape to understand risks, impacts, and harms associated with the use of personal information.

- Review proposals/solicitations to identify privacy risks and mitigations; communicate effectively with stakeholders, with minimal oversight.

- Review contracts, subcontracts, licensing agreements, etc.

and identify privacy and data protection requirements, risks, and contract mitigations, with minimal oversight.

- Develop and maintain a working knowledge and ability to identify required federal/state/global privacy controls for management review.

- Draft privacy impact assessment for management review with minimal oversight.

- Draft public-facing privacy statements with minimal oversight.

- Develop and maintain an understanding of Maximus operations, systems and systems integration

- Investigate and document the risk resulting from assigned privacy and data protection incidents, including applying legal analysis to make breach determination under all applicable standards, determine root causes, recommend sanctions, identify potential process improvements, including training recommendations, with minimal oversight.

- Participate in the breach notification process with internal and external stakeholders with support from management.

- Review proposals and contract actions processed for the company prior to signature or negotiation and ensure that all factors have been considered and all necessary information has been gathered, with minimal oversight.

- Manage and respond to data subject requests with minimal oversight.

- Periodically create, review, and/or revise functional area documentation and project-specific templates and other documents with minimal oversight.

- Conduct on-site and virtual project privacy audits to determine privacy compliance with support from senior management.

- Identify and implement efficient methods for assessing privacy and d...