Senior Counsel, Privacy and Compliance

Overview

A clinical-stage biotechnology organization is seeking a Counsel specializing in data privacy and compliance to support the expansion of its clinical trials and compliance infrastructure. This role involves maintaining and shaping a privacy-by-design framework through vendor onboarding, data mapping, policy development, and negotiating privacy terms in transactions. The position also supports the growth of the compliance function within the Legal department by providing guidance, implementation, training, and cross-functional collaboration.

Responsibilities

Data Privacy

• Develop and maintain infrastructure to comply with data privacy regulations across Europe and other countries in support of clinical trial plans.
• Review and negotiate data protection terms, including Data Processing Agreements (DPAs), vendor agreements, customer agreements, and security addenda.
• Monitor and advise on privacy and compliance developments such as U.S. state privacy laws, GDPR, CCPA/CPRA, sector-specific privacy rules, and emerging AI and cybersecurity requirements.
• Support incident response, data subject rights requests, privacy impact assessments, transfer impact assessments, and regulatory inquiries.
• Manage vendor onboarding and maintenance for vendors processing personal data.
• Maintain the Record of Processing Activity.
• Provide counsel on privacy-by-design reviews, data mapping, vendor onboarding, AI/data use cases, and new geographical expansions.
• Draft policies and conduct training to support data protection compliance.

Compliance

• Assist the Legal team in drafting and implementing corporate compliance policies, training, and follow-up.
• Partner with Human Resources and other functions to identify needs for policies or guidance.
• Collaborate with internal stakeholders to create a compliance function that balances business growth with risk protection.

Requirements

• Minimum of four years of experience in data privacy counseling within the biotech or pharmaceutical industry, law firm, or preferably in-house.
• Strong working knowledge of privacy and data protection laws, including U.S. state privacy laws, GDPR, CCPA/CPRA, and related regulatory frameworks.
• Experience reviewing and negotiating privacy, security, and data protection provisions in commercial agreements.
• Ability to provide clear, practical advice in a fast-paced business environment.
• Strong judgment, attention to detail, and ability to manage multiple projects independently.
• Excellent written and verbal communication skills.
• Admission to practice law in at least one state and eligibility to practice law in Utah as in-house counsel.

Preferred Qualifications

• Privacy certifications such as IPP/US, CIPP/E, CIPM, or similar.
• Experience building or scaling privacy and compliance programs in-house.

Compensation & Benefits

• Estimated annual base salary range: $251,900 to $309,760 (USD), based on skills and experience.
• Eligibility for annual bonus and equity compensation.
• Comprehensive benefits package.

Location

• Preferred home base in Salt Lake City, Utah or New York City.
• Remote work considered with commitment to regular on-site visits for routine work and departmental events.

Additional Information

• The role involves collaboration with Clinical Technology, Clinical Operations, and Human Resources teams.
• The legal and compliance team operates in a communicative and supportive environment focused on aligning legal advice with business goals.
• Equal opportunity employer committed to providing accommodations during the selection process.
• Recruitment agencies are not authorized to submit resumes unless contacted directly by the organization's Talent Acquisition team.