Overview
A leading provider of accident and health insurance products for the higher education market is seeking an experienced Corporate & Regulatory Counsel to join their legal team. This role focuses on supporting a nationwide accident and health insurance carrier with expertise in state and federal privacy compliance, healthcare data regulation, operational implementation, and incident response.
Responsibilities
- Serve as the primary legal advisor on privacy compliance matters across the organization
- Provide guidance on compliance with HIPAA, HITECH, FERPA, GLBA, CCPA/CPRA, and related state and federal healthcare privacy laws
- Advise on data incident and breach response, including risk assessments, regulatory notifications, remediation strategies, and coordination with internal and external stakeholders
- Review, draft, and negotiate privacy provisions in vendor, third-party administrator (TPA), technology, and business partner agreements
- Support and enhance privacy governance frameworks, including policies, procedures, training programs, and audits
- Collaborate with Compliance, Audit, Information Security, IT, Operations, Product, and Vendor Management teams to translate legal requirements into practical operational solutions
- Monitor regulatory developments and enforcement trends affecting healthcare privacy and insurance data
- Assist with privacy-related inquiries from regulators, customers, partners, and internal stakeholders
- Assess privacy issues related to new products, processes, and technologies, supporting cross-functional teams with mitigation strategies
- Support data mapping, classification, management, and governance activities
- Manage other enterprise-wide privacy matters as assigned by senior legal leadership
- Analyze legal issues with strong business acumen and provide counsel from a business perspective
- Work closely with business leaders and Procurement on a broad range of commercial agreements, including vendor and TPA contracts, service agreements, and technology contracts
- Provide contract-related training, peer review, and coaching to colleagues
- Establish and improve contract processes, templates, and playbooks to enhance efficiency and compliance
- Serve as a resource on applicable laws impacting health plans
- Uphold high standards of professionalism, integrity, and ethical conduct
- Manage tasks efficiently to meet deadlines with urgency
- Potentially manage staff, including conducting regular check-ins, setting expectations, and ensuring accountability
- Foster a supportive learning environment through continuous development, training, and growth
- Coach and mentor team members by providing constructive feedback and direction
- Perform other duties as assigned
Requirements
- Juris Doctor (J.D.) from an accredited law school
- Admission to practice law and in good standing with at least one state bar
- Privacy certification such as CIPP strongly preferred
- Minimum of 5 years of relevant legal experience with significant focus on privacy compliance, preferably in an in-house legal or compliance department
- Strong understanding of insurance laws and regulations including HIPAA/HITECH, FERPA, GLBA, and CCPA/CPRA
- Expertise in data incident and breach response
- Experience collaborating with Information Security or Technology teams
- Proven experience reviewing and negotiating privacy provisions in commercial agreements
- Ability to work on cross-functional teams in a fast-paced, rapidly scaling environment
- Excellent legal research skills and ability to communicate effectively with business stakeholders
- Strong organizational skills with thorough follow-up on time-sensitive matters
- Excellent verbal, written communication, presentation, and negotiation skills
- Outstanding attention to detail and problem-solving abilities
- Strong analytical skills to identify and address potential issues
- High level of personal integrity, professionalism, and intellectual curiosity
- Ability to motivate and provide direction to team members
- Capable of working independently and collaboratively
Compensation & Benefits
- Annual gross base salary range: $125,000 to $175,000, dependent on qualifications and experience
- Comprehensive benefits package including medical, vision, dental, life and accident insurance
- 401(k) retirement plan
- Short-term and long-term disability coverage
- Flexible and dependent care spending accounts
- Tuition reimbursement
- Business casual dress code
Location
Headquartered in Springfield, Massachusetts, with a nationwide operational scope.