Overview
This role provides company-wide legal counsel related to AI governance, data privacy, HIPAA compliance, and cybersecurity risk management. The Associate General Counsel & Privacy Officer serves as the organization’s Chief Privacy Officer, partnering with executive leadership on privacy matters. Responsibilities also include supervising the company-wide contract management system, with support from a contract manager.
The position collaborates with technology, security, procurement, executive leadership, and other business stakeholders, as well as attorneys, paralegals, and managers within the legal department.
Responsibilities
Commercial Contracting (Estimated 40% of time)
- Lead legal review and negotiation of:
- Software licensing agreements
- Staffing agreements
- Consulting agreements
- SaaS agreements
- AI platform agreements
- Technology service agreements
- Business associate agreements
- Cybersecurity vendor contracts
- General vendor contracts
- Strategic partnerships
- Advise procurement and business stakeholders on business, legal, privacy, and data security risks in these agreements.
AI Governance & Responsible AI (Estimated 25% of time)
- Lead the organization’s AI legal and governance strategy in collaboration with IT, Compliance, and Operations.
- Develop and maintain AI governance frameworks, policies, and approval processes.
- Advise executive leadership on legal, ethical, and regulatory implications of generative AI, machine learning, and emerging technologies.
- Review and approve AI initiatives involving:
- Protected health information (PHI)
- Employee data
- Proprietary information
- Monitor evolving federal and state AI regulations and assess organizational impacts.
- Support development of enterprise AI risk management practices aligned with industry frameworks such as the NIST AI Risk Management Framework.
Privacy & HIPAA Compliance (Estimated 25% of time)
- Serve as legal advisor on HIPAA privacy, security, and breach notification requirements.
- Oversee breach response investigations and reporting obligations.
- Provide guidance on use, disclosure, retention, and protection of PHI and personally identifiable information.
- Oversee legal aspects of data privacy compliance, including:
- HIPAA
- HITECH
- CCPA/CPRA
- State privacy laws
- Other applicable regulations
- Partner with IT, Marketing, and other departments on privacy impact assessments and risk mitigation activities, including practices and policies regarding biometrics and data capture, collection, and tracking.
Technology & Cybersecurity (Estimated 10% of time)
- Provide legal oversight for cybersecurity governance and data protection strategies.
- Advise on incident response, ransomware events, data breaches, and regulatory reporting requirements.
- Review technology architecture, cloud computing arrangements, SaaS agreements, and enterprise software implementations.
- Support vendor risk management initiatives involving technology providers.
- Develop contractual and governance standards related to information security and data protection.
Qualifications
Must Haves
- Juris Doctor (J.D.) from an accredited law school.
- Active bar membership in good standing in the United States.
- 7+ years of legal experience, including at least three years of full-time (not contract) law firm experience.
- Extensive training and experience negotiating high-dollar IT and vendor agreements.
- Strong drafting skills for complex and sophisticated matters.
- Cutting-edge expertise advising on the use of AI and building enterprise AI governance programs.
- Ability to identify changes in law and educate and train others on these changes.
- Comprehensive expertise in privacy and HIPAA compliance.
- Detail-oriented, organized, responsive, and deadline-driven.
- Mature self-starter and collaborative team player.
Preferred Qualifications (Not Required)
- Healthcare industry experience.
- Professional certifications such as CIPP/US, CIPM, CHPC, or another recognized information privacy credential. Must be willing to obtain such certifications.
Compensation & Benefits
Posted Pay Range
Benefits Package (Comprehensive)
- Medical/dental/vision insurance
- Short- and long-term disability
- Life insurance and AD&D
- Supplemental life insurance
- Flexible spending accounts
- 401(k) savings
- Paid time off
- Company-paid holidays
Additional compensation details: Salaries are determined by various factors such as qualifications, experience, and location, and do not include potential bonuses or benefits. Pay may vary based on job-related factors including work location, experience, knowledge, skills, education, certifications, and internal equity.
Location
Attention Florida applicants: This position requires a background screening through the Florida Care Provider Background Screening Clearinghouse.