Overview
An organization specializing in AI-powered healthcare technology is seeking an experienced Privacy Counsel to join their legal team. This role focuses on healthcare privacy compliance, incident response, and strategic legal support to drive growth while managing legal risks.
Responsibilities
- Lead the incident response and data breach management program, including investigation protocols, notification assessments, regulatory reporting, and post-incident remediation.
- Develop and scale privacy compliance programs aligned with national and global frameworks such as GDPR, UK DPA, CCPA/CPRA, and other U.S. state privacy laws.
- Collaborate with Security, Product, and Engineering teams to ensure security safeguards, privacy-by-design principles, and clear data governance roles.
- Support customer data access and deletion requests.
- Work with internal legal teams to integrate privacy compliance into broader regulatory strategies, advising business units on compliance with data protection laws.
- Create and deliver privacy policies, playbooks, templates, and training materials to promote awareness and operational consistency.
- Monitor privacy and data security trends and regulatory changes, assessing their impact on operations.
Requirements
- Juris Doctor (JD) degree from an accredited law school and active bar membership in good standing in at least one U.S. jurisdiction.
- Minimum of 8 years of relevant privacy and data protection experience, including in-house counsel roles.
- Deep understanding of global privacy regulations including GDPR, UK GDPR, CCPA/CPRA, biometric-specific laws, and other U.S. privacy and data security frameworks.
- Proven experience leading data breach and incident response programs.
- Strong organizational skills with a practical, risk-based approach to building scalable compliance systems.
- Excellent communication and interpersonal skills, capable of translating complex regulatory requirements into clear, actionable advice.
- Ability to manage multiple priorities in a fast-paced environment.
- Demonstrated ability to work independently and exercise sound business judgment.
Preferred Qualifications
- Prior experience in healthcare or health technology sectors, either in-house, government, or law firm.
- Familiarity with privacy regulations as they relate to artificial intelligence.
- Candidates located in New York City or the San Francisco Bay Area are preferred, though remote candidates willing to travel quarterly to hub offices and periodically for off-sites and partnership meetings will be considered.
Compensation & Benefits
- Salary range: $182,750 - $255,000
- Generous paid time off including 14 paid holidays and flexible PTO
- Comprehensive medical, dental, and vision coverage for employees and their families
- Monthly Health Savings Account (HSA) contributions for those on High Deductible Health Plans
- Paid parental leave and family forming benefits
- 401(k) matching program
- Tax-free personal device allowance
- Access to Flexible Spending Accounts (FSA) and commuter benefits
- Monthly lifestyle wallet for fitness, professional development, coworking, and more
- Mental health support including therapy and coaching
- Paid sabbatical leave after 5 years of employment
- Competitive equity grants
Location
Offices located in San Francisco (Mission District), New York City (SoHo), and Pittsburgh (East Liberty). The role may require periodic travel to these hubs and other U.S. locations for collaboration and meetings.