Overview
An organization specializing in AI-powered healthcare technology is seeking an experienced Privacy Counsel to join their legal team. This role focuses on healthcare privacy compliance, incident response, and strategic legal support to ensure adherence to data protection laws while supporting business growth.
Responsibilities
- Lead the incident response and data breach management program, including investigations, notification assessments, regulatory reporting, and remediation.
- Develop and scale privacy compliance programs aligned with frameworks such as GDPR, UK DPA, CCPA/CPRA, and other U.S. state privacy laws.
- Collaborate with Security, Product, and Engineering teams to implement security safeguards, privacy-by-design principles, and clear data governance roles.
- Support customer data access and deletion requests.
- Work with internal legal teams to integrate privacy compliance into broader regulatory strategies across marketing, procurement, product lifecycle, and public policy.
- Create and deliver privacy policies, playbooks, templates, and training materials to promote awareness and operational consistency.
- Monitor privacy and data security trends and regulatory changes, assessing their impact on operations.
Requirements
- Juris Doctor (JD) degree from an accredited law school and active bar membership in good standing in at least one U.S. jurisdiction.
- Minimum of 8 years of relevant privacy and data protection experience, including in-house counsel roles.
- Deep understanding of global privacy regulations including GDPR, UK GDPR, CCPA/CPRA, biometric-specific laws, and U.S. privacy and data security frameworks.
- Proven experience leading data breach and incident response programs.
- Strong organizational skills with a practical, risk-based approach to building scalable compliance systems.
- Excellent communication and interpersonal skills, capable of translating complex regulatory requirements into clear, actionable advice.
- Ability to manage multiple priorities in a fast-paced environment.
- Demonstrated ability to work independently and exercise sound business judgment.
Preferred Qualifications
- Prior experience in healthcare or health technology sectors, either in-house, government, or law firm.
- Familiarity with privacy regulations as they relate to artificial intelligence.
- Candidates located in New York City or the San Francisco Bay Area are preferred, though remote candidates willing to travel quarterly to hub offices and periodically for off-sites and partnership meetings will be considered.
Compensation & Benefits
- Salary range: $182,750 - $255,000
- Generous paid time off including 14 paid holidays and flexible PTO
- Comprehensive medical, dental, and vision insurance for employees and their families
- Monthly Health Savings Account (HSA) contributions for those on high deductible health plans
- Paid parental leave and family forming benefits
- 401(k) matching program
- Tax-free personal device allowance
- Access to Flexible Spending Accounts (FSA) and commuter benefits
- Monthly lifestyle wallet for fitness, professional development, coworking, and more
- Mental health support including therapy and coaching
- Paid sabbatical leave after 5 years of employment
- Competitive equity grants
Location
Offices located in San Francisco (Mission District), New York City (SoHo), and Pittsburgh (East Liberty). The role may require periodic travel to these hubs and other U.S. locations for collaboration and meetings.