Corporate Counsel (Remote)

Overview

This role provides corporate legal support at the intersection of healthcare technology, cybersecurity, data privacy, and regulatory compliance. The attorney will advise on legal issues, draft and negotiate contracts, manage risk, and counsel business partners on HIPAA, HITECH, and other privacy and security requirements. The position also supports broader commercial contracting and legal-risk matters affecting a healthcare technology platform.

Responsibilities

• Draft, review, and negotiate contracts related to healthcare technology, including:
  • Information-security addenda
  • Business associate agreements
  • Data-protection terms
  • Software agreements
  • Licensing agreements
  • Service contracts
  • Cybersecurity-related contractual provisions
• Serve as a partner to Information Security in connection with cybersecurity incidents, threats, vulnerabilities, and risk-management initiatives.
• Ensure compliance with federal and state healthcare regulations, including HIPAA, HITECH, and other relevant privacy and security laws.
• Monitor changes in cybersecurity and privacy laws (including HIPAA Security Rule requirements) and translate developments into practical guidance, policies, and contractual standards.
• Provide concise legal-risk assessments to business and technical stakeholders based on complex technical findings.
• Manage compliance with payer requirements and regulations affecting revenue cycle management.
• Identify and mitigate legal risks associated with healthcare technology, revenue cycle management operations, and litigation matters.
• Develop and implement policies and procedures to manage and minimize legal risks.
• Manage and resolve legal disputes, including contract disputes, regulatory inquiries, and litigation related to healthcare technology and revenue cycle management.
• Provide guidance and support to internal teams to ensure understanding and adherence to legal requirements.
• Work closely with other departments (including compliance, finance, and operations) to support business objectives and ensure legal alignment.
• Provide legal input in strategic planning and business development initiatives.

Requirements

• Minimum 3 years at a law firm as a corporate or transactional associate and/or as an in-house corporate or transactional attorney.
• Demonstrated experience advising cybersecurity incidents, including:
  • incident response
  • digital forensics findings
  • remediation plans
  • associated legal and contractual risks
• Juris Doctor (JD) from an accredited law school.
• Active membership in good standing in at least one U.S. state bar.
• Demonstrated knowledge or experience in healthcare law, technology law, cloud computing, SaaS, software license agreements, data privacy, HIPAA/HITECH, state privacy and breach-notification laws, recognized security frameworks, Omnibus and other laws, accreditations, and regulations specific to the software and technology industry.
• Well-versed in drafting, reviewing, and negotiating contracts related to healthcare technology, including the contract areas listed in the Responsibilities section.
• Ability to work effectively in a rapidly changing environment.
• Ability to evaluate technical security information and translate it into clear legal-risk assessments and practical business recommendations.
• Strong organizational and time management skills.
• Ability to adapt to constantly changing priorities while demonstrating initiative, accountability, and leadership.
• Strategic and analytical thinking.
• Sound decision-making ability.

Preferred Qualifications

• Healthcare and/or information technology industry experience (strongly preferred).
• Clearinghouse or Revenue Cycle Management experience (a plus).
• Experience partnering with information-security, privacy, compliance, technology, and operational teams.
• Experience advising a healthcare technology, healthcare clearinghouse, health plan, or other regulated technology organization.
• Experience managing the legal response to third-party or customer cybersecurity incidents.
• Knowledge of healthcare interoperability, electronic-data exchange, and revenue-cycle-management operations.
• A relevant privacy or cybersecurity credential, such as CIPP/US, CIPM, or a comparable certification.
• Experience in commercial contracting for a healthcare technology company.

Sponsorship

Sponsorship, in any form, is not available for this position.

Compensation & Benefits

• Competitive salary and bonus structure
• Generous HSA company contribution
• Healthcare, vision, and dental benefits
• 401k match program (available on day one)
• Unlimited PTO for salaried associates + 9 paid holidays
• Hourly associates start at 19 days of PTO and increase from there with all the same holiday benefits
• Wellness reimbursement up to $250/year for gym memberships, participation in racing events, weight management programs, etc.
• Education reimbursement
• Paid parental leave for both moms and dads, for both birth parents and adoptive parents

Location

Remote, US

Equal Opportunity & Workplace Notices

• Equal opportunity employer; employment decisions are made without regard to race, religious creed, color, age, sex, sexual orientation, gender identity, gender expression, genetic information, national origin, religion, marital status, medical condition, disability, military service, pregnancy, childbirth and related medical conditions, or any other protected classification.
• Drug-free workplace; candidates are required to pass a drug test before beginning employment.
• Federal law requires employers to verify identity and employment eligibility for all persons hired to work in the United States. When required by state law or federal regulation, employment eligibility verification is conducted using I-9 and E-Verify.

Application & Interview Process

• Recruiter recorded pre-screen
• Interview with hiring manager
• Panel interview with peers
• Final video interview with Chief Legal Officer

Remote Work Camera Requirement

Video participation is required for virtual meetings. If you are not able to use your camera for all virtual meetings, you should not apply for this role.