Senior Privacy, Security & AI Counsel

Overview

A fast-growing health technology organization is seeking a Senior Data Security & AI Counsel to provide high-quality, pragmatic legal counsel on cybersecurity, data protection, and AI matters. This role involves advising on regulatory compliance, supporting product and engineering teams, and drafting and negotiating commercial agreements to manage risk in a complex technical and regulatory environment.

Responsibilities

• Regulatory Advisory:

  • Monitor and interpret evolving state and federal privacy, security, and AI laws.
  • Translate legal requirements into actionable strategies, product requirements, and contract terms.
  • Advise on healthcare-related laws impacting privacy and security, including ERISA and ACA.

• Commercial Contracting Support:

  • Draft and negotiate privacy, security, and AI-related agreements such as Business Associate Agreements and Data Security Agreements.
  • Collaborate with commercial attorneys to align contract terms with product capabilities and company processes.
  • Provide guidance on privacy, AI, and security questions in Requests for Proposals and customer questionnaires.
  • Review and advise on data use, ownership, indemnification, and liability terms.

• Product, Engineering, and AI Support:

  • Stay current on AI laws and provide compliance guidance.
  • Identify and mitigate security and AI risks in new product features and initiatives.
  • Embed 'security by design' and 'privacy by design' principles in product development.
  • Lead legal classification of AI systems and develop AI governance frameworks and policies.
  • Guide stakeholders on AI principles including governance, transparency, accountability, and human oversight.
  • Support privacy and data governance programs covering data classification, retention, quality, access, and disposal.

• Privacy & Data Security Support:

  • Partner with Privacy Officer and Chief Information Security Officer on privacy and data security obligations.
  • Assist in drafting and operationalizing cybersecurity and data protection policies and procedures.
  • Support third-party risk management and due diligence.
  • Advise on escalated privacy or cyber incidents, regulatory inquiries, and related communications.

Requirements

• Juris Doctor (J.D.) degree with active U.S. state bar admission in good standing.
• Minimum 8 years of in-house legal experience supporting privacy, cybersecurity, data protection, and related regulatory matters, preferably in healthcare technology.
• Strong knowledge of healthcare privacy, security, and AI legal and regulatory frameworks, certifications, and best practices.
• Ability to interpret and operationalize privacy, security, and AI requirements in a fast-paced environment.
• Proven ability to build relationships and collaborate effectively across teams.
• Experience advising on risk mitigation in regulated or emerging technology areas.
• Familiarity with the entire product development lifecycle including contracting and compliance.
• Detail-oriented with strong strategic thinking and execution skills.
• Excellent judgment, business acumen, communication, and presentation skills.

Preferred Qualifications

• Experience at a rapidly growing technology or healthcare company.
• Relevant certifications such as CIPP/US, AIGP, CIPT, CISSP, HCISPP, Security+, or CCSP.

Compensation & Benefits

• Salary ranges by location:
  • Lehi, UT: $160,000–$200,000 USD
  • Plano, TX: $176,000–$220,000 USD
  • Remote (eligible states): $140,000–$213,500 USD
• Eligibility for 200,000 stock options.
• Benefits include health insurance, 401(k), and paid time off.

Location

This position can be based in San Francisco, CA; Lehi, UT; or Plano, TX, with an expectation of being in the office at least two days per week. Remote work is available for candidates residing in select states including AZ, CA, CO, CT, FL, GA, IL, MD, MA, MI, MN, NV, NJ, NY, NC, OH, OR, TN, TX, UT, VA, WA, or WI.

Equal Opportunity

The employer is an equal opportunity organization committed to diversity and inclusion. Reasonable accommodations are available during the interview process upon request.