Senior Counsel, Data Governance

This is a fully remote position, open to applicants in United States.

📋 Description

• Take ownership of Hello Heart’s legal and regulatory approach regarding data usage.

• Lead discussions related to data collection, utilization, sharing, retention, reuse, AI applications, ownership, and associated rights.

• Manage the Privacy Program, encompassing HIPAA and state privacy regulations, notifications and consents, consumer rights, incident handling, breach assessments, notifications, and regulatory inquiries.

• Administer the AI governance program, covering AI legislation, governance committees, policies, procedures, inventories, risk evaluations, controls, records, and regulatory change management.

• Analyze and apply data governance requirements into policies, controls, procedures, and implementation strategies.

• Develop and sustain data maps, processing records, classification standards, contractual obligation databases, compliance documentation, retention/disposal mechanisms, and vendor evaluations.

• Collaborate with Product, Engineering, Security, AI, Commercial, and User Support teams on privacy, data, and AI requirements.

• Spearhead privacy, data, and AI risk management, incident response, breach evaluation, notifications, corrective measures, and remediation efforts.

• Oversee compliance monitoring, audits, client reviews, regulatory inquiries, investigations, certifications, attestations, and assurance requests.

• Create policies, playbooks, training programs, and executive reporting.

⛳️ Requirements

• Over 8 years of legal expertise with a strong background in healthcare regulatory, privacy, and compliance experience within a HIPAA-regulated organization; healthcare experience is mandatory.

• Extensive experience in negotiating complex data rights with sophisticated enterprise clients and partners.

• Proven experience in managing healthcare privacy and compliance programs, including regulatory interpretation, incident and breach response, risk assessment, oversight, auditing, corrective actions, and remediation.

• Strong compliance judgment and an owner-operator mindset.

• Advanced proficiency in AI and automation capabilities, including the development and utilization of AI agents.

• Experience in AI governance, including emerging AI regulations, risk assessments, approval workflows, inventories, responsible AI controls, and monitoring.

• Exceptional judgment, executive presence, and communication abilities.

• Active legal license and membership in good standing with a U.S. state bar.

• Preferred: international privacy and data protection experience, privacy or AI governance certifications, experience with growth-stage privacy or AI governance programs, and client trust/security assurance experience.

🏝️ Benefits

• Comprehensive health, dental, and vision insurance.

• Flexible work hours and remote work opportunities.

• Professional development and continuing education support.

• Generous vacation and paid time off policies.

• Collaborative and innovative work environment.