Digital Risk Advisory

Direct Counsel is seeking a talented Digital Risk Advisory & Cybersecurity Associate with 3–6 years of experience to join a premier, nationally recognized privacy, cybersecurity, and digital risk practice.

This is an excellent opportunity for an attorney interested in sophisticated cybersecurity incident response, regulatory investigations, privacy compliance, and proactive cybersecurity advisory work. The successful candidate will advise national and multinational clients on significant cybersecurity matters while receiving meaningful client exposure and substantial responsibility.

Locations

• Atlanta, GA
• Chicago, IL
• Cincinnati, OH
• Columbus, OH
• Dallas, TX
• Denver, CO
• Houston, TX
• Los Angeles, CA
• Orange County, CA
• Philadelphia, PA
• San Francisco, CA
• Seattle, WA
• Washington, D.C.

Position Overview

The associate will advise clients through the full lifecycle of cybersecurity and digital risk matters, including responding to cybersecurity incidents and navigating subsequent regulatory inquiries and litigation.

The role also includes significant proactive advisory work, such as incident response tabletop exercises, cybersecurity program development, risk assessments, privacy and security compliance, and risk management.

Key Responsibilities

• Guide clients through the response to cybersecurity incidents and data breaches.
• Advise clients on post-incident matters, including regulatory investigations, inquiries, and related litigation.
• Counsel clients on privacy, cybersecurity, regulatory compliance, and risk management.
• Assist with incident response tabletop exercises and preparedness initiatives.
• Advise on the development and enhancement of cybersecurity and incident response programs.
• Conduct and advise on cybersecurity risk assessments.
• Analyze applicable state, federal, and international privacy and cybersecurity requirements.
• Work closely with forensic investigators, technical professionals, business teams, and outside vendors.
• Translate technical and forensic findings into practical legal and business guidance for non-technical stakeholders.
• Manage sophisticated, fast-moving, and often time-sensitive client matters.

Qualifications

• 3–6 years of relevant legal experience.
• J.D. from an accredited law school with a strong academic record.
• Experience advising clients through cybersecurity incidents and subsequent regulatory or litigation matters.
• Experience counseling clients on privacy, cybersecurity, compliance, and risk management.
• Strong written, oral communication, and project-management skills.
• Ability to effectively manage urgent matters and competing priorities.
• Admission, or eligibility for admission through waiver, in the jurisdiction where the candidate will reside and practice.

Candidates with 3+ years of commercial litigation experience and a demonstrated interest in cybersecurity will also be considered.

Preferred Experience

• Familiarity with privacy and cybersecurity laws such as state breach notification laws, CCPA, GDPR, and GLBA.
• Knowledge of data privacy and security regulations and industry-standard security frameworks.
• Experience working with forensic investigators and other technical professionals.
• Am Law 100 experience preferred.
• Strong interest in technology, cybersecurity, digital risk, and forensic investigations.

Compensation & Benefits

Denver: $240,000–$290,000

Chicago, Los Angeles, Orange County, San Francisco, Seattle & Washington, D.C.: $245,000–$345,000