Assistant General Counsel - Data Regulation, Privacy, Security & Governance

Location: San Francisco, United States; hybrid schedule with regular in-office presence

Annual salary: $240,000–$300,000, depending on geographic location, experience, and skills.

Company

hirify.global is a global law firm with more than 3,000 employees and partners worldwide, providing legal services across a broad range of practices.

What you will do

• Develop and maintain the firm’s legal strategy for data regulation, privacy, data security, data governance, and data protection.
• Advise on data inventories, records retention, cross-border transfers, data subject requests, lawful data use, and emerging data regulations.
• Prepare and update privacy, data governance, records, and public-facing data policies and procedures.
• Partner with the Chief Security & Technology Officer, Chief Innovation Officer, Data Protection Officer, Technology, Innovation, and General Counsel’s Office.
• Support privacy and data security incident preparedness, response, investigation, remediation, notifications, and post-incident improvements.
• Draft and negotiate data processing, data transfer, privacy, and security provisions in client and vendor contracts; oversee risk assessments, vendor monitoring, audits, and compliance initiatives.

Requirements

• JD from an ABA-accredited law school and active membership in good standing in the relevant jurisdiction and assigned hirify.global office jurisdiction.
• 6+ years of relevant experience, preferably as a practicing attorney, with substantial experience in data protection, privacy, and governance.
• Experience with U.S. export controls and privacy and data protection laws in the United States, Europe, and Asia.
• Advanced knowledge of GDPR, privacy and data governance frameworks, and experience drafting and operationalizing related policies.
• Strong technology and commercial contracting experience, particularly with data processing and transfer agreements and privacy and security provisions.
• Ability to work extended or weekend hours and travel as required.

Nice to have

• Experience with privacy risk assessments, compliance monitoring, vendor oversight, incident response, and regulatory engagement.
• Cybersecurity expertise.
• CIPP/US, CIPP/E, CIPT, or similar certification.

Culture & Benefits

• Hybrid work model combining in-office collaboration with remote work days.
• Medical, dental, vision, life insurance, disability, long-term care, HSA, FSA, commuter, and backup care benefits.
• Twenty vacation days, ten sick days, ten paid holidays, parental leave, and fertility benefits.
• Collaborative environment focused on diverse perspectives, creativity, accountability, and cross-functional work.