Senior Counsel – Data Governance, Privacy, Cybersecurity

This is a fully remote position, open to applicants in Pennsylvania.

📋 Description

• Provide guidance on data governance, privacy, artificial intelligence, and cybersecurity for Cencora’s Managed Services Organization (MSO)

• Offer advice regarding MSO data flows, operational models, protected health information (PHI), sensitive data, as well as U.S. federal and state privacy and security regulations

• Consult with business leaders on privacy, security, and AI requirements tied to MSO services, platforms, analytics, care and therapy support, and population health initiatives

• Execute reviews focused on privacy-by-design and security-by-design principles

• Prepare, assess, and negotiate Business Associate Agreements (BAAs), Data Processing Agreements (DPAs), data sharing contracts, service agreements, and security addenda for vendors/partners

• Advise on managing third-party risks, subcontractor obligations, and client requirements for the MSO

• Collaborate with information security and technology teams on controls aligned with NIST standards and HITRUST/ISO considerations

• Assist in incident response readiness, breach assessments, notification responsibilities, and communications related to incidents

• Support governance and reporting, client audits, questionnaires, and regulatory inquiries

• Build relationships with stakeholders and establish escalation paths to facilitate scalable approaches to data governance, privacy, security, and innovation

⛳️ Requirements

• A minimum of 4–8 years of legal experience, including expertise in privacy, cybersecurity, and/or data governance

• Juris Doctor degree from an accredited law school

• Admittance to a U.S. state bar

• Familiarity with HIPAA/HITECH regulations, state privacy laws, consumer health privacy statutes, SEC cybersecurity disclosure requirements, AI regulatory frameworks, and commonly utilized security standards such as NIST CSF/800-53

• Understanding of the healthcare industry, including business models, practices, trends, and competitive dynamics

• Strong skills in decision-making and business-oriented legal communication

• Capability to address both straightforward and complex legal issues

• Proficiency in multitasking, prioritizing deliverables, and managing various responsibilities simultaneously

• Openness to adapting to changes and shifting priorities

• Effective communication skills, both oral and written

• Skills in collaboration, negotiation, presentation, organizational acumen, creativity, and spotting legal trends

• Attention to detail and a willingness to learn new technologies pertinent to clinical data insights

• Proficient in Microsoft Word, Excel, PowerPoint, Teams, SharePoint, and related AI functionalities

🏝️ Benefits

• Medical, dental, and vision coverage

• Backup dependent care services

• Assistance with adoption

• Infertility treatment coverage

• Support for family building

• Behavioral health resources

• Paid parental leave

• Paid caregiver leave

• Training and development programs

• Resources for professional growth

• Mentorship opportunities

• Employee resource groups

• Volunteer initiatives