Senior Privacy, Security & AI Counsel

Overview

A fast-growing health technology organization is seeking a Senior Data Security & AI Counsel to provide high-quality, pragmatic legal counsel on cybersecurity, data protection, and AI matters. This role involves advising on regulatory compliance, supporting product and engineering teams, and drafting and negotiating commercial agreements to manage risk in a complex technical and regulatory environment.

Responsibilities

• Regulatory Advisory:

  • Monitor and interpret evolving state and federal privacy, security, and AI laws.
  • Translate legal requirements into actionable strategies, product requirements, and contract terms.
  • Advise on healthcare-related laws impacting privacy and security, including ERISA and ACA.

• Commercial Contracting Support:

  • Draft and negotiate privacy, security, and AI-related agreements such as Business Associate Agreements and Data Security Agreements.
  • Provide guidance on privacy, security, and AI questions in Requests for Proposals and customer questionnaires.
  • Review and advise on data use, ownership, indemnification, and liability terms aligned with applicable laws.

• Product, Engineering, and AI Support:

  • Stay current on AI laws and provide compliance support.
  • Identify and mitigate security and AI risks in new product features, embedding security and privacy by design.
  • Lead legal classification of AI systems and develop AI governance frameworks, including ethical AI policies.
  • Guide stakeholders on AI principles such as governance, transparency, accountability, and human oversight.
  • Collaborate on privacy and data governance programs covering data classification, retention, quality, access, and disposal.

• Privacy & Data Security Support:

  • Partner with Privacy Officer and Chief Information Security Officer on privacy and data security obligations and certifications (e.g., HITRUST, NIST, NYDFS, SOC2).
  • Assist in drafting and operationalizing cybersecurity and data protection policies and support third-party risk management.
  • Support responses to privacy or cyber incidents, regulatory inquiries, and legal escalations.

Requirements

• Juris Doctor (J.D.) degree with active U.S. state bar admission in good standing.
• Minimum 8 years of in-house legal experience supporting privacy, cybersecurity, data protection, and related regulatory matters, preferably in healthcare technology.
• Strong knowledge of healthcare privacy, security, and AI legal and regulatory frameworks, certifications, and best practices.
• Ability to interpret and operationalize privacy, security, and AI requirements in a fast-paced environment.
• Proven ability to build relationships and collaborate effectively across teams.
• Experience advising on risk mitigation in regulated or emerging technology areas.
• Familiarity with the entire product development lifecycle including contracting and compliance.
• Detail-oriented with strong strategic thinking and execution skills.
• Excellent judgment, business acumen, communication, and presentation skills.

Preferred Qualifications

• Experience at a rapidly growing technology or healthcare company.
• Relevant certifications such as CIPP/US, AIGP, CIPT, CISSP, HCISPP, Security+, or CCSP.

Compensation & Benefits

• Salary ranges by location:
  • Lehi, UT: $160,000–$200,000 USD
  • Plano, TX: $176,000–$220,000 USD
  • Remote: $140,000–$213,500 USD
• Eligibility for 200,000 stock options.
• Benefits include health insurance, 401(k), and paid time off.

Location

This position can be based in San Francisco, CA; Lehi, UT; or Plano, TX, with an expectation of being in the office at least two days per week. Remote work is available in select states including AZ, CA, CO, CT, FL, GA, IL, MD, MA, MI, MN, NV, NJ, NY, NC, OH, OR, TN, TX, UT, VA, WA, and WI.

Equal Opportunity

The organization is an equal opportunity employer and values diversity. It does not discriminate based on race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status. Reasonable accommodations are available during the interview process upon request.