Sr Counsel Data Privacy & Protection

Accountabilities

• • Serve as a senior subject-matter expert and strategic advisor on data privacy, data protection, cybersecurity, and AI-related legal matters, providing practical and timely guidance to attorneys, business teams, and leadership.
  • Advise stakeholders on U.S. and international privacy requirements covering data collection and use, transparency, consent, data handling, and regulatory compliance.
  • Support and enhance privacy programs by partnering with Privacy, Data Governance, Information Security, IT, Compliance, and business teams to identify, assess, and mitigate privacy risks.
  • Support Privacy Impact Assessments (PIAs/DPIAs), vendor risk reviews, data mapping, data inventories, and other internal privacy assessments.
  • Draft, review, and negotiate privacy, AI, and security-related contractual provisions and agreements, including Data Processing Agreements, Data Protection Agreements, Business Associate Agreements, and Security Agreements.
  • Provide legal guidance on emerging products, technologies, AI systems, and automated decision-making processes, helping stakeholders incorporate privacy considerations early in product and technology development.
  • Support AI governance and responsible-use frameworks, monitoring emerging AI privacy and data protection regulations and escalating material developments and risks to leadership.
  • Provide legal counsel during privacy and cybersecurity incidents, including investigations involving unauthorized access, loss, or disclosure of personal information, breach notification requirements, liability assessments, and incident response.
  • Help develop enterprise-wide incident response practices and advise on privacy and cybersecurity preparedness.
  • Support privacy training and awareness programs that educate employees on data protection obligations, appropriate data handling, and regulatory requirements.
  • Advise Information Security, Compliance, Data Governance, IT, and other teams on complex privacy matters involving systems, technologies, and data processing activities.
  • Support HIPAA privacy compliance, where applicable, including incident response and regulatory alignment.
  • Monitor developments in privacy, data protection, cybersecurity, and AI regulation and enforcement, identifying emerging legal risks and recommending appropriate actions.
  • Counsel legal colleagues on privacy, AI, security, and relevant contractual issues affecting the businesses they support.

  Requirements

  • Juris Doctor (JD) degree and active membership in good standing with a U.S. state bar.
  • 8–12 years of experience as a practicing attorney, whether in-house, at a law firm, or a combination of both, including 5–10 years of hands-on experience advising on data privacy and security matters.
  • Strong knowledge of privacy and data protection laws and regulations, including comprehensive U.S. state privacy laws, CPRA, VDCPA, CMIA, state breach notification requirements, HIPAA, GDPR, TCPA, and CAN-SPAM.
  • Demonstrated ability to assess privacy, data protection, cybersecurity, and AI-related legal risks and develop practical strategies to mitigate those risks.
  • Significant experience drafting, reviewing, and negotiating AI, privacy, data protection, and security-related contracts and provisions.
  • Experience handling data loss prevention and cybersecurity events, forensic investigations, breach notifications, and cybersecurity preparedness.
  • Experience managing privacy and/or cybersecurity incident response activities.
  • Experience with privacy litigation and regulatory enforcement matters is a plus.
  • Strong understanding of emerging technologies, with interest or experience in healthcare, life sciences, AI, and related technology environments.
  • Privacy or AI certifications such as CIPP-US, CIPP-C, CIPP-E, CIPM, AIGP, or CHPC are advantageous.
  • Excellent written, verbal, negotiation, and stakeholder communication skills, with the ability to explain complex legal concepts clearly to technical and non-technical audiences.
  • Strong organizational, project management, and prioritization abilities, with the capacity to manage multiple complex matters simultaneously.
  • Self-motivated, detail-oriented, collaborative, and comfortable taking initiative and leading projects independently.
  • Demonstrated integrity, professionalism, sound judgment, and commitment to high-quality legal work.

  Benefits

  • Annual salary of $175,000–$205,500, depending on experience.
  • Medical, dental, and vision insurance.
  • Life insurance coverage.
  • 401(k) retirement benefits.
  • Paid time off.
  • Fully remote work opportunity within the United States.
  • Opportunity to work across privacy, cybersecurity, AI governance, healthcare, life sciences, and emerging technologies.
  • Broad exposure to U.S. and international regulatory and compliance matters.
  • Strategic partnership with legal, compliance, information security, data governance, IT, and business leadership teams.