Overview
A healthcare organization is seeking a Senior Associate General Counsel specializing in Data Privacy & Security. This senior individual contributor role involves enterprise-wide leadership at the intersection of healthcare, technology, compliance, and innovation. The position focuses on shaping and governing data privacy, data security, data use, and emerging technologies within a fast-moving, highly regulated environment.
Responsibilities
- Lead and develop the organization's privacy legal governance framework, including policies, standards, and operational guardrails aligned with U.S. and India requirements
- Advise on healthcare privacy, data security, governance, retention, defensible deletion, and compliant data use across products, analytics, operations, and enterprise initiatives
- Build scalable privacy programs, playbooks, implementation guides, and self-service tools to enable teams to operate quickly within clear legal boundaries
- Serve as a primary legal advisor on high-risk or novel data uses, privacy and security risk assessments, digital tracking, website governance, and member outreach
- Integrate practical privacy review into core business workflows such as product development, vendor procurement, marketing, and data-sharing activities
- Draft, negotiate, and finalize a wide range of commercial agreements including Business Associate Agreements (BAAs), SaaS, services, licensing, NDAs, Statements of Work (SOWs), grants, consultant agreements, and information security terms
- Own legal standards for data protection terms and advise on third-party risk, vendor diligence, and vendor-related incidents
- Lead legal response to privacy and data security incidents, including breach analysis, notification strategy, regulatory engagement, and stakeholder coordination
- Support regulatory audits, examinations, and inquiries involving privacy and data security
- Advise on AI governance and emerging technologies, including acceptable use, legal risk, transparency, accountability, and evolving regulatory expectations
- Monitor developments in privacy, healthcare, and technology law and translate them into clear, actionable business guidance
- Support privacy integration and remediation during acquisitions, new partnerships, and organizational growth
Requirements
- Active license to practice law
- 6-8+ years of privacy and data security experience in-house and/or at a law firm, preferably supporting healthcare or technology companies
- Strong knowledge of U.S. privacy and data security laws, including HIPAA/HITECH, CCPA/CPRA, and evolving state privacy laws
- Proven ability to develop and operationalize privacy governance frameworks, policies, playbooks, and scalable processes
- Experience managing a high volume of diverse contract types such as services agreements, BAAs, SaaS, NDAs, End User License Agreements (EULAs), and licensing agreements
- Experience leading or supporting privacy and data security incident response, including breach analysis, regulatory notification, and vendor investigations
- Experience participating in or supporting regulatory audits or examinations by state or federal regulators
Preferred Qualifications
- Prior healthcare regulatory experience, especially familiarity with Medicare Advantage, CMS requirements, value-based care models, or primary care-oriented healthcare delivery
- Experience supporting technology-enabled healthcare products, data platforms, or digital health initiatives
- Familiarity with AI/ML governance frameworks, algorithmic accountability, and legal considerations related to emerging technologies
- Experience leading privacy program integration following mergers, acquisitions, or significant organizational changes
- Experience advising on the use of protected health information (PHI) in clinical, operational, analytics, or value-based care contexts
Compensation & Benefits
- Salary range: $153,000 to $191,300 annually
- Compensation packages vary based on individual skills, experience, and qualifications
Location
- Remote (United States, preference for North Carolina)