Privacy Associate

Responsibilities

• Advise on international data privacy and cybersecurity laws including GDPR, UK GDPR, and CCPA/CPRA
• Assist in the implementation and maintenance of privacy and cybersecurity policies
• Conduct privacy impact assessments and legitimate interest assessments
• Manage vendor and third-party due diligence and cross-border data transfers
• Support incident and breach response coordination with Technology and Information Security teams
• Draft, review, and negotiate contracts including DPAs, vendor agreements, and client engagement letters
• Monitor developments in privacy, data protection, and AI across relevant jurisdictions
• Deliver privacy and data protection training programs for internal teams

Requirements

• Bachelor’s degree in a related field
• 4-8 years post-qualification experience in privacy and data protection law
• Strong experience drafting and negotiating privacy-sensitive contracts
• Demonstrated knowledge of GDPR, cross-border transfer mechanisms, and ePrivacy laws
• Excellent communication skills with the ability to explain technical concepts to non-legal stakeholders
• Experience in regulated environments such as financial services or tech is an advantage

Preferred Qualifications

• IAPP certification (CIPP/E, CIPP/US, CIPM, or equivalent)

Benefits

• Flexible hybrid work schedule (Tuesdays, Wednesdays, Thursdays in office)
• Competitive benefits and paid time off
• Pension plan
• Educational and professional development financial assistance
• Employee referral bonus program

About the Company

Kroll Bond Rating Agency (KBRA) is a full-service credit rating agency registered with the U.S. Securities and Exchange Commission and other global regulatory bodies.