Senior Counsel, Data Privacy & Protection

This is a fully remote position, open to applicants in United States.

📋 Description

• Serve as a subject matter expert and consultant for attorneys and business teams regarding data privacy and protection legislation.

• Provide guidance to legal and business teams on adherence to U.S. and international data protection regulations, data collection and usage, privacy disclosures, transparency, and consent.

• Collaborate with privacy and security teams to strengthen the privacy program and reduce privacy risks.

• Assist in privacy impact assessments, vendor risk evaluations, and internal reviews utilizing data mapping and inventory data.

• Create and oversee privacy training and awareness programs.

• Examine, draft, and negotiate terms related to AI, privacy, and data security in contracts with business partners and suppliers.

• Analyze and negotiate Business Associate Agreements, Data Processing Agreements, Data Protection Agreements, and Security Agreements.

• Counsel on data protection legislation impacting business operations and contractual agreements.

• Provide advice on new products and technologies along with their privacy implications.

• Guide investigations related to unauthorized access, loss, or disclosure of personal data, and assist in incident response.

• Formulate enterprise-wide best practices for incident response and offer guidance on privacy and cybersecurity incident management.

• Identify significant legal issues and foresee potential privacy-related legal challenges.

• Advise Information Security, Compliance, and other stakeholders dealing with privacy and data handling on strategy and complex matters.

• Support AI governance and responsible usage frameworks while monitoring new AI privacy and data protection regulations.

• Collaborate with Compliance, Data Governance, Information Security, IT, and business stakeholders to evaluate privacy risks associated with AI and automated decision-making systems.

• Assist in meeting HIPAA Privacy compliance requirements, including incident response and regulatory alignment.

• Report directly to the Chief Litigation, Employment & Privacy Counsel and work closely with the Privacy Officer, Data Governance Director, Information Security Officer, and legal team.

⛳️ Requirements

• A Juris Doctor (JD) degree is mandatory.

• Membership in a U.S. state bar in good standing is required.

• Minimum of 8–12 years of experience as a practicing attorney, either in-house or at a law firm.

• At least 5–10 years of direct, practical experience in providing legal counsel on data privacy and security issues.

• Knowledge of comprehensive state privacy laws, including CPRA, VDCPA, CMIA, state breach notification laws, HIPAA, GDPR, TCPA, and CAN-SPAM.

• Significant experience in assessing legal risks related to data protection, privacy, and AI.

• Proven experience in drafting and negotiating contracts and provisions related to AI, privacy, and security.

• Familiarity with data loss prevention and cybersecurity incidents, forensic investigations, breach notifications, and cybersecurity readiness.

• Experience in managing privacy and/or cybersecurity incident response initiatives.

• Exceptional oral and written communication and negotiation skills.

• Certifications in privacy and AI, such as CIPP-US, CIPP-C, CIPP-E, CIPM, AIGP, or CHPC, are advantageous.

• Interest and experience with emerging technologies, particularly in healthcare and life sciences.

• Strong organizational, teamwork, work ethic, multitasking, prioritization, initiative, project management, and both independent and collaborative work skills.

• Detail-oriented and self-driven.

• Commitment to integrity and professionalism, with a demonstrated passion for excellence.

🏝️ Benefits

• Medical coverage.

• Dental coverage.

• Vision coverage.

• Life insurance.

• 401k plan.

• Paid time off.

• Fully remote work environment.

• Flexible working conditions.

• Opportunities to explore and enhance skills.

• Equal opportunities in hiring, promotions, advancement, compensation, benefits, and training.