Associate General Counsel, Privacy - Remote

Overview

An organization in the health care and well-being sector is seeking an Associate General Counsel to support its Privacy Office. This role focuses on HIPAA Privacy and Security Rules, state privacy and breach notification laws, and the implementation of emerging federal and state privacy requirements. The position supports a behavioral care business delivering behavioral health treatment directly to patients and is ideal for a privacy attorney with experience advising provider groups. The role reports to senior legal counsel and partners closely with the behavioral care compliance team.

This position offers the flexibility to work remotely from anywhere within the U.S. However, hires in the Minneapolis or Washington, D.C. areas are required to work in the office at least four days per week.

Responsibilities

• Serve as a trusted privacy advisor with a focus on HIPAA and state privacy law compliance
• Advise on regulatory change management and support implementation of emerging federal and state privacy requirements
• Design and operationalize provider-specific privacy programs, including training, communications, policies and procedures, and Notices of Privacy Practices
• Provide privacy support for business associate agreements and contracting in collaboration with legal and contracting teams
• Manage a team assisting in privacy support, incident management, and overall program maintenance
• Counsel the incident management team and lead responses to regulatory inquiries, including OCR investigations, HHS reporting, and state attorney general matters
• Support HIPAA individual rights processes
• Deliver clear, actionable privacy updates and reporting to business and privacy leadership regularly
• Collaborate on privacy due diligence for acquisitions and integration activities
• Draft and coordinate responses to government requests for comment on proposed privacy regulations
• Conduct and advise on privacy assessments, audits, and compliance reviews
• Monitor the evolving privacy landscape and translate legal and industry developments into practical guidance
• Partner closely with Privacy, Compliance, and cross-functional stakeholders
• Operate effectively in a fast-paced, high-growth environment balancing risk and business priorities

Requirements

• Juris Doctor (JD) degree
• Current license to practice law
• Minimum of 5 years practicing law
• At least 3 years of experience in a privacy legal environment
• Experience in health care privacy law

Preferred Qualifications

• Certified Information Privacy Professional (CIPP) designation or similar
• Familiarity with legal research tools such as LexisNexis
• Ability to adhere to telecommuting policies when working remotely

Compensation and Benefits

• Salary range: $134,600 to $230,800 annually (based on full-time employment and factors such as local labor markets, education, work experience, and certifications)
• Comprehensive benefits package
• Incentive and recognition programs
• Equity stock purchase plan
• 401(k) contribution
• Benefits subject to eligibility requirements

Location

• Remote work available anywhere in the U.S.
• Minneapolis or Washington, D.C. hires must work in-office at least four days per week

Additional Information

• The position will be posted for a minimum of two business days or until a sufficient candidate pool is collected; posting may close early due to volume of applicants.
• The employer is an equal opportunity employer and complies with all applicable laws regarding nondiscrimination.
• Employment is contingent upon passing a drug test prior to starting.