VP, Associate General Counsel – Privacy Officer

This is a fully remote position, open to applicants in United States.

📋 Description

• Offer comprehensive legal guidance across the organization concerning AI governance, data privacy, HIPAA compliance, and cybersecurity risk management.

• Serve as the Chief Privacy Officer, collaborating with executive leadership on privacy-related issues.

• Oversee the company-wide contract management system with assistance from a contract manager.

• Ensure that IT and vendor contracts are thoroughly reviewed, negotiated, and monitored.

• Lead the legal evaluation and negotiation of agreements related to software licensing, staffing, consulting, SaaS, AI platforms, technology services, business associates, cybersecurity vendors, general vendors, and strategic partnerships.

• Counsel procurement and business stakeholders on business, legal, privacy, and data security risks.

• Direct the organization’s strategy for AI governance and legal matters.

• Create and uphold AI governance frameworks, policies, and approval procedures.

• Advise executive leadership on the legal, ethical, and regulatory ramifications of generative AI, machine learning, and emerging technologies.

• Review and sanction AI initiatives involving PHI, employee data, or proprietary information.

• Keep track of federal and state AI regulations and evaluate their effects on the organization.

• Support enterprise AI risk management in line with frameworks like the NIST AI Risk Management Framework.

• Provide guidance on HIPAA privacy, security, and breach notification obligations.

• Manage investigations and reporting requirements related to data breaches.

• Advise on the use, disclosure, retention, and protection of PHI and personally identifiable information.

• Ensure compliance with HIPAA, HITECH, CCPA/CPRA, state privacy laws, and other relevant regulations.

• Collaborate with IT, Marketing, and various departments to conduct privacy impact assessments and mitigate risks.

• Offer legal oversight for cybersecurity governance and data protection strategies.

• Provide counsel on incident response, ransomware incidents, data breaches, and regulatory reporting.

• Assess technology architecture, cloud computing arrangements, SaaS agreements, and enterprise software implementations.

• Support vendor risk management efforts involving technology providers.

• Establish contractual and governance standards for information security and data protection.

• Work in tandem with the CTO, CISO, Procurement, Executive Leadership Team, business functions, and the legal department.

⛳️ Requirements

• Juris Doctor (J.D.) degree from an accredited law school.

• Active bar membership in good standing in the United States.

• Over 7 years of legal experience.

• Minimum of three years of full-time (not contractual) experience at a law firm.

• Significant training and experience in negotiating high-value IT and vendor agreements.

• Strong drafting abilities for complex and sophisticated legal matters.

• Cutting-edge expertise in advising clients on AI utilization and developing enterprise AI governance programs.

• Capacity to identify changes in the law and educate and train others regarding these changes.

• In-depth knowledge of privacy laws and HIPAA compliance.

• Detail-oriented, organized, responsive, and deadline-driven.

• Enjoys collaboration and is a fun team player.

• Mature self-starter.

🏝️ Benefits

• Medical, dental, and vision insurance.

• Short- and long-term disability insurance.

• Life insurance and AD&D coverage.

• Supplemental life insurance options.

• Flexible spending accounts.

• 401(k) savings plan with company matching.

• Paid time off.

• Company-paid holidays.

• Patient-centered care model.

• Diverse and inclusive workplace.