Overview
This full-time remote position is for a Privacy Officer and Associate General Counsel role within a growing multi-state healthcare organization specializing in addiction treatment services. The role involves ensuring compliance with privacy laws and healthcare regulations, providing legal counsel to leadership and operational teams, and supporting regulatory and corporate matters.
Responsibilities
Privacy Support
- Provide daily legal advice on privacy matters including HIPAA, state privacy laws, and regulations specific to behavioral health and substance abuse treatment.
- Manage investigations and breach notification processes.
- Oversee patient privacy notices, website privacy policies, and compliance with tracking technology laws.
- Supervise processes related to patient access, amendment, and restrictions on health information.
- Advise on subpoena compliance and medical records releases.
- Lead a team of at least two medical records professionals.
- Develop and deliver training and communications to promote privacy awareness.
- Update and manage internal privacy policies.
- Collaborate with IT to enhance privacy controls.
- Maintain and report privacy metrics to leadership.
Healthcare Regulatory & Compliance Support
- Assist with compliance under HIPAA and behavioral healthcare regulations (42 CFR Part 2).
- Review internal policies and procedures for regulatory alignment.
- Partner with Compliance on audits, investigations, and corrective action plans.
- Advise operational leaders on regulatory risk mitigation and compliance controls.
Corporate & Operational Support
- Manage external litigation in coordination with outside counsel, including employment, professional, and general liability matters.
- Review, draft, and negotiate vendor and service agreements, including Business Associate Agreements (BAAs).
- Support mergers and acquisitions due diligence and integration efforts as needed.
- Develop practical, business-oriented legal solutions aligned with organizational goals.
Requirements
- Juris Doctor (JD) degree from an accredited law school.
- Active license to practice law in at least one U.S. state.
- Minimum of four years of relevant legal experience.
- Demonstrated expertise in privacy law.
- Experience in the healthcare industry, either in-house or at a law firm.
- Willingness to travel up to 15%, including overnight travel for hearings, site visits, meetings, training, and conferences.
Preferred Qualifications
- In-house healthcare legal experience.
- Experience supporting multi-site or multi-state organizations.
- Familiarity with behavioral health or substance use disorder regulatory frameworks.
Compensation & Benefits
- 18 days of paid time off (PTO) plus 8 paid holidays.
- 401(k) plan with company match.
- Company-sponsored ongoing training and certification opportunities.
- Comprehensive benefits package including medical, dental, vision, short-term disability, long-term disability, and accident insurance.
- Substance Use Disorder Treatment and Recovery Loan Repayment Program (STAR LRP).
- Discounted tuition and scholarships through a university partnership.
Location
This is a remote position with occasional travel requirements as noted.
The organization is an equal opportunity employer and makes employment decisions based on merit and legitimate business considerations. Discrimination based on race, color, creed, religion, sex, parental leave, national origin, gender identity or expression, age, disability, veteran status, marital status, sexual orientation, genetic information, political affiliation, or any other protected characteristic is prohibited.