Associate General Counsel, Privacy

Overview

An organization specializing in healthcare data collaboration is seeking an Associate General Counsel, Privacy to join their Legal department. This role involves providing practical guidance on cybersecurity, privacy, and data governance matters while helping to shape and implement the global privacy strategy. Reporting to the Chief Compliance and Privacy Officer, the position supports compliance with evolving global privacy frameworks and facilitates growth and innovation across various business units including enterprise, legal and insurance, life sciences, payer, and provider sectors.

Responsibilities

Strategic Privacy & Security Leadership

• Support Privacy-by-Design strategies for new products and solutions by advising product, engineering, and business teams on privacy considerations and accountability.
• Assist in cybersecurity incident response activities, including developing and maintaining policies, playbooks, and response plans.
• Collaborate with the security team to develop and deliver tabletop exercises and cybersecurity education.
• Facilitate data mapping and data governance across the enterprise.
• Conduct Privacy Impact Assessments (PIAs), Data Protection Impact Assessments (DPIAs), and AI reviews related to product development and data processing.
• Build and maintain partnerships across teams such as security, product, engineering, business units, finance, and HR.
• Participate in compliance, data use, and governance initiatives to align the privacy program with organizational priorities.
• Represent the organization as a privacy and data governance subject matter expert in industry associations and external engagements.

Policy Development and Risk Mitigation

• Collaborate with the Chief Compliance and Privacy Officer to develop and implement compliance policies, risk assessments, and monitoring processes.
• Develop, apply, and enforce data governance and information security policies to meet regulatory and contractual requirements.
• Work with cross-functional teams to identify and mitigate risks and support internal audit risk assessments.
• Implement due diligence procedures for third-party vendors and contractors to assess compliance capabilities.

Collaboration and Advisory Guidance

• Serve as a subject matter expert on privacy obligations, providing clear and practical advice to senior leadership and departments.
• Support preparation of board reports, executive presentations, regulatory filings, and legal disclosures related to cybersecurity and privacy.
• Foster strong relationships with internal and external stakeholders to support compliance with data privacy and cybersecurity requirements.
• Translate privacy and security legal and regulatory requirements into practical business-aligned advice.
• Support due diligence for acquisitions to ensure compliance and integration into the compliance program.

Requirements

• Juris Doctor (J.D.) degree.
• Minimum of 8 years of experience in privacy and data protection, preferably within healthcare or health technology sectors.
• Comprehensive knowledge of federal, state, and global healthcare regulatory compliance, privacy, and data protection laws.
• Proven experience providing strategic advice on complex compliance and privacy matters to senior leadership.
• Experience building, implementing, and maintaining compliance and privacy programs.
• Strong leadership and collaboration skills across multiple departments and organizational levels.
• Excellent written and verbal communication skills, capable of simplifying complex information.
• Strategic thinker with problem-solving abilities and adaptability in fast-paced, high-growth environments.

Preferred Qualifications

• Experience navigating fast-paced, high-growth environments with a business-focused approach to legal risk and reward trade-offs.
• Senior leadership presence with strong communication skills to influence business leaders and industry peers.
• Ability to quickly build trust, negotiate business objectives, and engage constructively with senior leaders and business units.
• Flexibility and willingness to work across all organizational levels and contribute hands-on as needed.
• Relevant certifications such as CHC, CIPP/US/E, CIPM, CIPT, or AIGP.

Compensation & Benefits

• Estimated total cash compensation range: $263,000 to $330,000 USD (including bonus/commission).
• Estimated base salary range: $211,000 to $264,000 USD (excluding bonus/commission).
• Eligibility for bonus/commission.

Additional Information

• Employment sponsorship is not available for this role.
• Post-offer health screenings and proof of vaccinations (e.g., flu, Tdap, COVID-19) may be required depending on client requirements and location.
• Reasonable accommodations are available for individuals with disabilities during the employment process upon request.
• The organization is an Equal Employment Opportunity employer committed to diversity and inclusion, providing equal consideration regardless of race, color, sex, sexual orientation, gender identity, religion, national origin, disability, veteran status, or other protected status.