Senior Managing Counsel, Privacy & Cybersecurity (Americas)

Job Description
Solventum is a new healthcare company building on a legacy of solving big challenges that improve lives and help healthcare professionals perform at their best. We are guided by empathy, insight, and clinical intelligence and collaborate with the best minds in healthcare to address our customers toughest challenges.

The Impact You’ll Make in this Role
As Sr. Managing Counsel, Privacy & Cybersecurity (USAC & LATAM) you will lead the legal support for privacy and cybersecurity efforts across the company’s USAC and LATAM operations. You will advise and collaborate with IT, cybersecurity, business and functional teams, and external partners to manage legal risks related to data security and privacy. You will strengthen the companys security posture, ensure compliance, and oversee security and compliance assessments across applications, processes, products, and vendors. This role reports to the Chief Privacy Officer and the Vice President of Information and Digital.

Provide expert legal counsel to Privacy and Cybersecurity teams to ensure compliance with contractual commitments and regulatory obligations related to data privacy and security.

Conduct privacy and data protection impact assessments to ensure sensitive health data is used in compliance with privacy regulations and contractual rights.

Advise cybersecurity teams on incident response and investigations, ensuring proper documentation to minimize risks, protect privacy, and fulfill legal obligations during and after security incidents.

Collaborate with Procurement and business contracting teams to draft, negotiate, and maintain privacy/data protection terms in contracts and agreements.

Lead the company’s legal response to product vulnerabilities, information security breaches, and cyber events, including advising on regulatory notifications at federal, state, and international levels.

Counsel IT operations, security teams, and business units on developing and implementing cybersecurity plans, incident response strategies, and compliance with industry standards and regulations.

Work closely with Cybersecurity, Procurement, and Legal teams to manage third‑party risks, including creating contract templates, negotiation frameworks, and advising on third‑party audits and assessments.

Advise on the de‑identification, pseudonymization, and anonymization of sensitive health data.

Provide guidance to business and product teams on data handling requirements based on sensitivity and compliance standards.

Implement “privacy by design” principles in product development processes and contribute to product risk assessments.

Stay informed on emerging global regulatory requirements impacting data privacy and security and advise the business accordingly.

Develop and provide legal content for privacy training programs, awareness campaigns, and compliance with sensitive health information handling requirements.

Your Skills & Expertise
To set you up for success in this role from day one, Solventum requires the following qualifications:

Juris Doctor (JD) from an accredited law school or Law degree.

8 years of experience in data privacy and cybersecurity law, ideally within the life sciences, healthcare, medical devices, or similarly regulated industries.

Expertise in global data privacy laws (including GDPR) and AI laws (including EU AI Act).

Expertise in US data privacy laws and regulations, including HIPAA and US state consumer privacy laws (e.g., CCPA, CPA, etc.).

Expertise in advising on cybersecurity, including product vulnerability, incident response, and legal obligations arising from privacy and security incidents.

Experience in advising on cybersecurity standards such as PCI DSS, the NIST Cybersecurity Framework.

Additional Qualifications

Experience in Canada and LATAM data privacy laws and regulations, including LGPD, PIPEDA and the Privacy Act.

Familiarity with medical device regulations (FDA, FD&C Act) related to data privacy and security.

Experience managing HIPAA compliance programs and addressing legal issues related to health data.

Experience working with IT systems, data management, and collaborating with both technical teams and senior leadership.

Excellent written, verbal, and presentation skills, with the ability to communicate complex legal matters in a clear, concise manner to non‑legal stakeholders.

Strong analytical and strategic thinking skills, with the ability to solve complex legal challenges.

Highly organized, detail‑oriented, and committed to maintaining high ethical standards and professionalism.

Proven ability to prioritize multiple projects and work under tight deadlines in a fast‑paced, dynamic environment.

Relevant privacy and cybersecurity certifications (e.g., CIPP/US, AIGP, CIPP, CIPM, CIPT, CHPS, CHPC, CISSP) are preferred but not required.

Extensive experience in negotiating and drafting technology transactions and data protection agreements with customers, vendors, and partners.

Ability to manage legal and regulatory compliance across diverse frameworks.

Proven leadership skills with the ability to engage with internal stakeholders and lead significant projects.

High responsiveness and client‑focused, with an ability to manage and nurture strong internal relationships.

Preference for experience working within or with the life sciences industry.

Work location:

Remote - United States

Travel:

May include up to 20% domestic/international travel

Relocation Assistance:

Not authorized

Legal work authorization:

Must be legally authorized to work in the country of employment without sponsorship for employment visa status (e.g., H1B status).

Supporting Your Well‑being
Solventum offers many programs to help you live your best life – both physically and financially. To ensure competitive pay and benefits, Solventum regularly benchmarks with other companies that are comparable in size and scope.

Compensation
Applicable to US Applicants Only: The expected compensation range for this position is $211,600 - $290,950, which includes base pay plus variable incentive pay, if eligible. This range represents a good faith estimate for this position. The specific compensation offered to a candidate may vary based on factors including, but not limited to, the candidate’s relevant knowledge, training, skills, work location, and/or experience. In addition, this position may be eligible for a range of benefits (e.g., Medical, Dental & Vision, Health Savings Accounts, Health Care & Dependent Care Flexible Spending Accounts, Disability Benefits, Life Insurance, Voluntary Benefits, Paid Absences and Retirement Benefits, etc.). Additional information is available at:

EEO Statement
Solventum is an equal opportunity employer. Solventum will not discriminate against any applicant for employment on the basis of race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, or veteran status.

#J-18808-Ljbffr