Senior Counsel - Data Governance, Privacy and Cybersecurity

Overview

The organization is seeking a Corporate Counsel II (Senior Counsel) with experience advising on and providing strategic leadership in data governance, privacy, cybersecurity, and AI as they apply to a Managed Services Organization (MSO) that serves clinical practice groups in the retinal space across the United States.

This role reports to the Assistant General Counsel, Privacy, Responsible Data, & Technology within the legal team. It serves as a key legal resource to MSO legal and business teams on the design, launch, and operation of MSO technology-based services, including the collection, use, sharing, and protection of sensitive health information and other regulated data.

Responsibilities

• Serve as a key counsel for MSO data governance, privacy, AI, and cybersecurity matters, including advising on MSO data flows and operating models; use and protection of PHI and other sensitive data; and compliance with applicable U.S. federal and state privacy and security requirements (e.g., HIPAA/HITECH and state consumer health privacy laws, as applicable).
• Counsel MSO business owners on privacy, security, and AI requirements for new and existing MSO offerings, including product counseling for MSO platforms, analytics, care/therapy services support, population health insights, and other data-enabled services.
• Draft, review, and negotiate MSO-facing privacy and security contractual terms, including BAAs, DPAs, data sharing agreements, service agreements, and vendor/partner security addenda; advise on third-party risk management, subcontractor flow-downs, and MSO client requirements.
• Partner with MSO information security and technology teams to support MSO security program needs (e.g., NIST-aligned controls, HITRUST/ISO considerations where required).
• Support MSO incident response preparedness and provide legal support, including advising on breach assessment and notification obligations; coordinate with privacy, security, compliance, communications professionals, and client teams on incident-related MSO client, patient, and/or regulatory communications.
• Support MSO governance and reporting, including responses to MSO client audits, questionnaires, and regulatory inquiries relating to privacy and cybersecurity representations.
• Establish and maintain relationships and clear escalation paths with MSO stakeholders (clinical/medical, operations, product/engineering, security, compliance, commercial, and other legal and compliance colleagues) to drive consistent, scalable approaches to data governance, privacy, and security risk management, while enabling MSO data innovation goals.

Requirements

• Minimum 4–8 years of experience as a lawyer, combined with expertise in privacy, cybersecurity, and/or data governance.
• Law degree from an accredited law school.
• Admission to a U.S. state bar.

Minimum Skills, Knowledge, and Abilities

• Working familiarity with cybersecurity and privacy regulations and frameworks relevant to MSO operations, including HIPAA/HITECH, state privacy laws (including consumer health privacy laws, as applicable), SEC cybersecurity disclosure rules (as applicable), AI regulatory frameworks, and commonly used security standards (e.g., NIST CSF/800-53, as needed).
• Knowledge of healthcare business and industry models, including typical practices and trends; ability to quickly learn the competitive landscape.
• Strong decision-making capability and ability to communicate business-oriented yet legally compliant recommendations.
• Ability to solve straightforward and complex problems and to take a new perspective on existing but potentially inefficient solutions.
• Ability to juggle multiple matters, multi-task, and prioritize deliverables to meet deadlines efficiently.
• Willingness to embrace change and shift priorities often with minimal advance warning/direction.
• Effective communication skills, both orally and in writing.
• Strong collaboration skills across all levels of business and professional colleagues.
• Effective interpersonal, negotiation, presentation, and communication skills, along with organizational skills, creativity, and legal trend-spotting.
• Attention to detail and ability to learn nuances of new technologies that impact the MSO and associated clinical space, particularly in the data insights arena.
• Proficiency in Microsoft Word, Excel, PowerPoint, Teams, Sharepoint, and the AI capabilities associated with this suite of tools.

Preferred Qualifications

• Experience delivering business-oriented legal services and project management across MSO initiatives, including privacy-by-design and security-by-design reviews.
• Experience analyzing prospective and retrospective research protocols from privacy and technology law angles.
• Experience enabling and prioritizing data sharing and interoperability arrangements.
• Experience evaluating and driving AI projects and governance.
• Experience ensuring incident response readiness and swift mitigation response for MSO platforms and associated vendor ecosystems.

Compensation & Benefits

• Full-time.
• Salary Range: $119,100 – $186,560
  • This salary range reflects a National Average for this job. The actual range may vary based on locale.
  • Ranges in Colorado/California/Washington/New York/Hawaii/Vermont/Minnesota/Massachusetts/Illinois State-specific locations may be up to 10% lower than the minimum salary range and 12% higher than the maximum salary range.

Benefits include medical, dental, and vision care, plus a comprehensive suite of benefits supporting physical, emotional, financial, and social wellness. Support for working families may include backup dependent care, adoption assistance, infertility coverage, family building support, behavioral health solutions, paid parental leave, and paid caregiver leave. The organization also offers training and professional development resources, mentorship program opportunities, employee resource groups, volunteer activities, and more.

Location

United States (serves clinical practice groups across the United States in the retinal space).