Corporate Legal Counsel

Overview

This Corporate Counsel role reports to the Associate General Counsel and provides legal support at the intersection of healthcare technology, cybersecurity, data privacy, and regulatory compliance. Responsibilities include advising on legal issues, drafting and negotiating contracts, ensuring compliance with healthcare laws and regulations, managing risk, and counseling the business on HIPAA, HITECH, and other privacy and security requirements. The attorney will also support broader commercial contracting and legal-risk matters impacting the healthcare technology platform.

Sponsorship, in any form, is not available for this position.

Responsibilities

• Draft, review, and negotiate contracts related to healthcare technology, including:
  • Information-security addenda
  • Business associate agreements
  • Data-protection terms
  • Software agreements and licensing agreements
  • Service contracts
  • Cybersecurity-related contractual provisions
• Serve as a partner to Information Security for cybersecurity incidents, threats, vulnerabilities, and risk-management initiatives.
• Ensure compliance with federal and state healthcare regulations, including HIPAA, HITECH, and other relevant privacy and security laws.
• Monitor changes in cybersecurity and privacy laws (including HIPAA Security Rule requirements) and translate developments into practical guidance, policies, and contractual standards.
• Provide concise legal-risk assessments to business and technical stakeholders based on complex technical findings.
• Manage compliance with payer requirements and regulations affecting revenue cycle management.
• Identify and mitigate legal risks associated with healthcare technology, revenue cycle management operations, and litigation matters.
• Develop and implement policies and procedures to manage and minimize legal risks.
• Manage and resolve legal disputes, including contract disputes, regulatory inquiries, and litigation related to healthcare technology and revenue cycle management.
• Provide guidance and support to internal teams to ensure understanding and adherence to legal requirements.
• Work with other departments, including compliance, finance, and operations, to support business objectives and ensure legal alignment.
• Provide legal input in strategic planning and business development initiatives.

Requirements

• Minimum 3 years at a law firm as a corporate or transactional associate and/or as an in-house corporate or transactional attorney.
• Demonstrated experience advising on cybersecurity incidents, including incident response, digital forensics findings, remediation plans, and associated legal and contractual risks.
• Healthcare and/or information technology industry experience is strongly preferred. Clearinghouse or Revenue Cycle Management experience is a plus.
• Juris Doctorate (JD) from an accredited law school and active membership in good standing in at least one U.S. state bar.
• Demonstrated knowledge or experience in healthcare law, technology law, cloud computing, SaaS, software license agreements, data privacy, HIPAA/HITECH, state privacy and breach-notification laws, recognized security frameworks, Omnibus and other laws, accreditations, and regulations specific to the software and technology industry.
• Well versed in drafting, reviewing, and negotiating contracts related to healthcare technology, including the contractual areas listed in Responsibilities.
• Ability to work effectively in a rapidly changing environment.
• Ability to evaluate technical security information and translate it into clear legal-risk assessments and practical business recommendations.
• Strong organizational and time management skills.
• Ability to adapt to constantly changing priorities while demonstrating initiative, accountability, and leadership.
• Strategic and analytical thinking.
• Sound decision-making ability.

Preferred Qualifications

• Experience partnering with information-security, privacy, compliance, technology, and operational teams.
• Experience advising a healthcare technology company, healthcare clearinghouse, health plan, or other regulated technology organization.
• Experience managing legal response to third-party or customer cybersecurity incidents.
• Knowledge of healthcare interoperability, electronic-data exchange, and revenue-cycle-management operations.
• A relevant privacy or cybersecurity credential, such as CIPP/US, CIPM, or a comparable certification.
• Experience in commercial contracting for a healthcare technology company.

Compensation & Benefits

• Competitive salary and bonus structure
• Generous HSA company contribution
• Healthcare, vision, and dental benefits
• 401k match program (available on day one)
• Unlimited PTO for salaried associates plus 9 paid holidays
• Hourly associates start at 19 days of PTO and go up from there, with the same holiday benefits
• Wellness reimbursement up to $250/year for gym memberships and related wellness activities
• Education reimbursement
• Paid parental leave for both moms and dads, including birth parents and adoptive parents

Location

• Remote, US

Interview Process

• Recruiter recorded pre-screen
• Interview with hiring manager
• Panel interview with peers
• Final video with Chief Legal Officer