Counsel - Privacy D-PO

Description & Requirements

Join our growing Privacy team as we support complex, high-impact programs that rely on strong data protection practices.

In this role, you will apply and deepen your knowledge of U.S.

and global privacy laws, support privacy reviews across proposals and contracts, assess incidents, draft key compliance documents, and collaborate with stakeholders across the organization.

This is an excellent opportunity for a JD-credentialed early-career professional who is eager to build expertise in privacy, data protection, and the evolving AI legal landscape while contributing to meaningful, compliance-driven work in a dynamic environment.

Essential Duties and Responsibilities:
- Develop and maintain a working knowledge of US federal and state privacy and data protection laws and regulations.
- Develop and maintain awareness of global privacy and data protection laws that apply to the company and how they impact the company's privacy and data protection compliance posture.
- Develop a working knowledge of Artificial Intelligence legal landscape to understand risks, impacts, and harms associated with the use of personal information.
- Review proposals/solicitations to identify privacy risks and mitigations; communicate effectively with stakeholders, with minimal oversight.
- Review contracts, subcontracts, licensing agreements, etc.

and identify privacy and data protection requirements, risks, and contract mitigations, with minimal oversight.
- Develop and maintain a working knowledge and ability to identify required federal/state/global privacy controls for management review.
- Draft privacy impact assessment for management review with minimal oversight.
- Draft public-facing privacy statements with minimal oversight.
- Develop and maintain an understanding of Maximus operations, systems and systems integration
- Investigate and document the risk resulting from assigned privacy and data protection incidents, including applying legal analysis to make breach determination under all applicable standards, determine root causes, recommend sanctions, identify potential process improvements, including training recommendations, with minimal oversight.
- Participate in the breach notification process with internal and external stakeholders with support from management.
- Review proposals and contract actions processed for the company prior to signature or negotiation and ensure that all factors have been considered and all necessary information has been gathered, with minimal oversight.
- Manage and respond to data subject requests with minimal oversight.
- Periodically create, review, and/or revise functional area documentation and project-specific templates and other documents with minimal oversight.
- Conduct on-site and virtual project privacy audits to determine privacy compliance with support from senior management.
- Identify and implement efficient methods for assessing privacy and data protection incidents and identifying and m...