Senior Counsel - Data Governance, Privacy and Cybersecurity

Cencora seeks a Senior Counsel to provide strategic legal guidance on data governance, privacy, cybersecurity, and AI matters for its Managed Services Organization serving clinical practices. The role involves advising on healthcare data flows, regulatory compliance, vendor risk management, and incident response within a highly regulated environment.

Responsibilities

• Advise MSO leadership on privacy, security, and AI requirements for new and existing service offerings
• Draft, review, and negotiate privacy and security contracts including BAAs, DPAs, and data-sharing agreements
• Partner with information security and technology teams to support MSO security program implementation
• Support incident response readiness and provide legal guidance on breach assessment and notification obligations
• Conduct privacy-by-design and security-by-design reviews and analyze research protocols from regulatory perspectives

Requirements

• 4–8 years of experience practicing law with expertise in privacy, cybersecurity, and/or data governance
• Juris Doctor from accredited law school; admission to U.S. state bar required
• Working knowledge of HIPAA/HITECH, state privacy laws, and security standards such as NIST CSF
• Understanding of healthcare business models, competitive landscape, and industry practices
• Strong cross-functional collaboration and oral/written communication skills
• Ability to prioritize multiple matters and adapt to shifting priorities in fast-paced environment