King & Spalding

Privacy & Data Protection Analyst

King & Spalding$80K — $95K *
Legal & Accounting
Less than 5 years of experience
Job Overview by Ladders

Qualifications

  • Bachelor's degree in a related field or equivalent experience.
  • 3+ years in privacy, data protection, or regulated governance.
  • Knowledge of privacy concepts like PII, PHI, and data agreements.
  • Experience reviewing security terms in agreements.
  • Familiarity with privacy regulations like HIPAA and GDPR.
  • Strong communication and organization skills.
  • Attention to detail and practical application of security requirements.
  • Preferred certifications in privacy or security (e.g. CIPP, CISSP).

Responsibilities

  • Support privacy program development and documentation.
  • Negotiate and review vendor/client privacy agreements.
  • Assess vendor data handling practices for risk management.
  • Conduct client privacy assessments with internal collaboration.
  • Manage operational privacy processes and policy updates.
  • Lead governance for regulated information types like HIPAA.
  • Analyze high-risk data matters and advise appropriate protections.
  • Maintain updates on privacy regulations and translate for stakeholders.
  • Oversee privacy governance activities in OneTrust.

Benefits

  • Comprehensive health and wellness plan.
  • Life and disability insurance options.
  • Flexible spending accounts and health savings account.
  • 401(k) plan with profit sharing opportunities.
  • Generous Paid Time Off (PTO) program.
Full Job Description
We are seeking a Privacy & Data Protection Analyst to support and mature the firm's privacy program. This role will work closely with Information Security, Legal, Information Governance, Procurement, HR, the Privacy Committee, and other business stakeholders to help the firm govern, protect, and responsibly use personal information, including client information, employee HR data, PHI, Controlled Unclassified Information (CUI), and other regulated or sensitive data types.

KEY RESPONSIBILITIES:
  • Support the firm's privacy program, including Privacy Committee meeting coordination, agenda and materials preparation, follow-up tracking, privacy program updates, and governance documentation.
  • Support the review and negotiation of vendor and client privacy requirements, including Data Processing Agreements (DPAs), data transfer terms, privacy provisions within client agreements and Outside Counsel Guidelines, AI-related requirements, and other contractual data protection obligations.
  • Assess how vendors and software tools collect, use, store, share, and protect sensitive privacy-related information as part of the firm's third-party risk management program
  • Complete client privacy and AI assessments and questionnaires, working with internal stakeholders to demonstrate the firm's controls and help ensure clients remain confident that their sensitive information is appropriately protected.
  • Manage and improve operational privacy processes, including data subject access request intake, tracking, and coordination; cookie and consent management; privacy notice updates; and privacy-related policy maintenance.
  • Lead governance activities for regulated and controlled information types, such as HIPAA-regulated PHI and Controlled Unclassified Information (CUI), including advising teams on the handling of especially sensitive matters, by coordinating compliance assessments, supporting initiatives such as HIPAA Security Risk Assessments and CMMC audits, and driving remediation and program maturity efforts.
  • Analyze highly sensitive or high-risk matters (e.g., significant PII, PHI, or sensitive government/regulatory matters) and advise engagement teams on appropriate data handling, access, and protection measures.
  • Maintain awareness of relevant privacy, data protection, AI, and regulated data requirements in jurisdictions where the firm operates, and translate changes into practical guidance for internal stakeholders.
  • Own core privacy governance activities in OneTrust, including ROPAs, PIAs/DPIAs, TIAs, vendor and application privacy assessments, data flow documentation, privacy risk tracking, remediation coordination, and stakeholder guidance.


QUALIFICATIONS:
  • Bachelor's degree in a related field or equivalent professional experience.
  • 3+ years of experience supporting privacy, data protection, or regulated data governance programs.
  • Working knowledge of privacy and data protection concepts, including personal information, protected health information, data processing agreements, data transfers, data subject rights, privacy notices, and records of processing or data flow documentation.
  • Experience reviewing privacy or security terms in vendor agreements, client contracts, or similar contractual documents.
  • Familiarity with privacy and security frameworks or requirements such as HIPAA, GDPR/UK GDPR, U.S. state privacy laws, NIST, ISO 27001, NIST 800-171, or CMMC.
  • Strong writing, organization, and stakeholder management skills, with the ability to keep work moving across legal, technical, and business teams.
  • Sound judgment, attention to detail, and the ability to apply privacy and security requirements in a practical, business-aware manner.
  • Privacy, security, or risk certifications such as CIPP/US, CIPP/E, CIPM, CIPT, CISSP, CISA, CISM, CRISC, or related credentials preferred.
  • Experience in a law firm, professional services, regulated industry, or client-service environment preferred.


The firm offers a generous total compensation package with bonuses and raises awarded in recognition of individual merit-based performance. All full-time Business Services employees may participate in King & Spalding's comprehensive benefit program including health and wellness plan, life and disability insurance, flexible spending accounts and a health savings account, a 401(k) plan, profit sharing plan, and a substantial Paid Time Off (PTO) program.

We are proud of our remarkably cohesive culture, which now encompasses more than 2,500 lawyers and business professionals worldwide. We seek to attract and develop the very best talent to work with us.

About King & Spalding

Celebrating more than 125 years of service, King & Spalding is an international law firm that represents a broad array of clients, including half of the Fortune Global 100, with 800 lawyers in 17 offices in the United States, Europe, the Middle East and Asia. The firm also represents hundreds of clients with new ventures and mid-sized companies in emerging industries.

King & Spalding Careers

There has never been a better time to explore the job opportunities at King & Spalding, a premier legal institution with a global footprint. This company stands out not only for its legal expertise but also for its commitment to growth, leadership, and innovation in the legal field.

Work You’ll Do

Join King & Spalding’s distinguished team to assist some of the most influential businesses and organizations worldwide. At King & Spalding, professionals are at the forefront of legal services, driving change across industries through a combination of deep legal expertise and broad industry knowledge. Transform the legal landscape with King & Spalding, where the culture of leadership and professional growth fosters an environment ripe for innovation and significant career advancement. Engage with a team of experts who are leaders in their fields, providing insights and solutions that redefine how legal challenges are addressed.

King & Spalding Employment Opportunities

King & Spalding is building a robust team of legal professionals to guide and support clients through complex legal challenges. The team is dedicated to delivering targeted solutions with a depth of knowledge that is unmatched in the legal sector.

Innovative Work

At King & Spalding, every position offers the chance to work on groundbreaking cases at the intersection of law, industry expertise, and digital innovation. The firm’s commitment to innovation is evident in its approach to solving complex legal challenges for its clients.

Be Part of a Great Team

Join a team that values diversity, inclusion, and professional development. King & Spalding is known for its collaborative environment, where skills are honed, and knowledge is shared. The firm’s global scale and leadership in legal services make it a powerhouse in the industry.

Future-Proof Your Career

King & Spalding offers a pathway to significant professional advancement, supported by comprehensive training, development programs, and diversity training. The firm’s commitment to career growth ensures that every team member has the opportunity to reach their full potential.

Explore

Discover how King & Spalding leads the way in client services and innovation: - Implementing cutting-edge legal strategies that set industry standards. - Offering tailored solutions that address the unique challenges of each client.

The King & Spalding Difference

With a commitment to excellence and a focus on sustainable growth, King & Spalding helps clients navigate the complexities of the legal world. The firm’s global presence and collaborative approach enable it to deliver exceptional service and results.

Stay Connected

Join the Team

Search for open positions that match your skills and interests. King & Spalding looks for passionate, curious, creative, and solution-driven team players. SEARCH KING & SPALDING JOBS

Keep Up to Date

Stay informed with career tips, insider perspectives, and industry-leading insights you can put to use today—all from the professionals who work at King & Spalding.

READ CAREERS BLOG

Job Alert Emails

Customize your subscription to receive job alerts, the latest news, and insider tips tailored to your preferences. Explore the exciting and rewarding opportunities that await at King & Spalding.
Learn more about King & Spalding
Industry
Founded
1885

Similar Jobs

More Jobs at King & Spalding

More Legal & Accounting Jobs

Find similar Privacy & Data Protection Analyst jobs: