Overview
This Counsel II position reports to the Assistant General Counsel for Privacy, AI, and Data Governance and provides legal and operational guidance on data privacy, information security, artificial intelligence, and data governance programs. The role involves developing and implementing privacy, AI, and data governance frameworks, ensuring compliance with evolving regulations across multiple jurisdictions, managing vendor risk assessments, negotiating data processing and AI-related contracts, and maintaining Privacy by Design frameworks.
Responsibilities
- Develop, implement, and maintain privacy policies, procedures, and compliance programs aligned with global data protection laws
- Monitor emerging legislation and regulatory guidance related to privacy, cybersecurity, and AI; assess business impact and recommend compliance strategies
- Create and maintain legal artifacts such as policies, procedures, templates, playbooks, and guidance documents for privacy, cybersecurity, and AI governance
- Support cybersecurity legal initiatives including contract negotiations for security terms, incident response planning, regulatory breach notifications, and coordination with information security teams
- Develop and advance AI governance frameworks, conduct risk assessments and reviews for AI systems, ensure compliance with emerging AI regulations, and implement ethical AI principles
- Conduct Data Protection Impact Assessments, Algorithmic Impact Assessments, and security risk assessments for new technologies, systems, and business initiatives
- Provide strategic legal counsel on data governance initiatives including data classification, retention, cross-border transfers, and data subject rights management
- Coordinate incident response activities for data breaches and security incidents, including regulatory notifications and customer communications
- Negotiate complex data and technology transactions including data processing agreements, business associate agreements, security exhibits, and AI-related contractual provisions
- Collaborate with training teams to develop and deliver data privacy, security, and AI governance training programs for employees and stakeholders
Required Knowledge & Skills
- Strong initiative and eagerness to learn and develop new skills
- Ability to identify complex legal and regulatory issues and provide pragmatic, actionable solutions
- Experience working in fast-growing technology environments with adaptability to evolving policies and procedures
- Deep understanding of privacy laws and cybersecurity regulatory frameworks
- Knowledge of AI governance principles and emerging AI regulations
- Effective interpersonal and problem-solving skills
- Strong contract negotiation skills, particularly with data processing agreements, security terms, and technology transactions
- Ability to translate complex technical and legal concepts for diverse audiences
- Ability to independently set and communicate prioritized goals and timelines to internal stakeholders
- Highly organized with strong attention to detail
Basic Qualifications
- Juris Doctor (J.D.) degree; member in good standing of a state Bar
- Certified Information Privacy Professional (CIPP/US or CIPP/E) preferred
- Minimum 5 years of experience in a law firm or in-house legal department providing counsel on data privacy, cybersecurity, and AI regulations, including regulatory compliance, complex data or technology transactions, and incident response
- Substantial experience collaborating with cross-functional teams including IT, security, engineering, and compliance
Preferred Qualifications
- Additional certifications such as Certified Information Privacy Manager (CIPM), AI Governance Professional (AIGP), or other relevant privacy/cybersecurity credentials
- Experience in the healthcare industry
- Knowledge of information security frameworks such as NIST, ISO 27001, SOC 2
- Familiarity with AI/ML technologies and their legal implications
- Experience with AI governance and emerging technology legal issues
- Experience with regulatory examinations and audits
Compensation & Benefits
Details regarding compensation and benefits are not specified.
Location & Work Conditions
- Remote position with flexibility in working hours as needed
- Some travel required, approximately 10%