Sr Counsel Data Privacy & Protection

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Sr. Counsel, Data Privacy & Protection based in United States.

This is a senior legal role focused on guiding privacy, data protection, cybersecurity, and AI governance across a diverse portfolio of businesses. You will serve as a trusted subject-matter expert, advising legal teams, business leaders, and cross-functional stakeholders on complex regulatory and operational matters. The role combines strategic legal counseling with hands-on work across contracts, privacy assessments, incident response, and emerging technologies. You will help shape policies, training, governance frameworks, and responsible AI practices while identifying and mitigating evolving data risks. The position offers significant exposure to U.S. and international privacy regulations across healthcare, life sciences, manufacturing, and technology environments. Success in this role requires sound judgment, strong communication, and the ability to translate complex legal requirements into practical business solutions.

Accountabilities

• Serve as a senior subject-matter expert and strategic advisor on data privacy, data protection, cybersecurity, and AI-related legal matters, providing practical and timely guidance to attorneys, business teams, and leadership.
• Advise stakeholders on U.S. and international privacy requirements covering data collection and use, transparency, consent, data handling, and regulatory compliance.
• Support and enhance privacy programs by partnering with Privacy, Data Governance, Information Security, IT, Compliance, and business teams to identify, assess, and mitigate privacy risks.
• Support Privacy Impact Assessments (PIAs/DPIAs), vendor risk reviews, data mapping, data inventories, and other internal privacy assessments.
• Draft, review, and negotiate privacy, AI, and security-related contractual provisions and agreements, including Data Processing Agreements, Data Protection Agreements, Business Associate Agreements, and Security Agreements.
• Provide legal guidance on emerging products, technologies, AI systems, and automated decision-making processes, helping stakeholders incorporate privacy considerations early in product and technology development.
• Support AI governance and responsible-use frameworks, monitoring emerging AI privacy and data protection regulations and escalating material developments and risks to leadership.
• Provide legal counsel during privacy and cybersecurity incidents, including investigations involving unauthorized access, loss, or disclosure of personal information, breach notification requirements, liability assessments, and incident response.
• Help develop enterprise-wide incident response practices and advise on privacy and cybersecurity preparedness.
• Support privacy training and awareness programs that educate employees on data protection obligations, appropriate data handling, and regulatory requirements.
• Advise Information Security, Compliance, Data Governance, IT, and other teams on complex privacy matters involving systems, technologies, and data processing activities.
• Support HIPAA privacy compliance, where applicable, including incident response and regulatory alignment.
• Monitor developments in privacy, data protection, cybersecurity, and AI regulation and enforcement, identifying emerging legal risks and recommending appropriate actions.
• Counsel legal colleagues on privacy, AI, security, and relevant contractual issues affecting the businesses they support.

Requirements

• Juris Doctor (JD) degree and active membership in good standing with a U.S. state bar.
• 8–12 years of experience as a practicing attorney, whether in-house, at a law firm, or a combination of both, including 5–10 years of hands-on experience advising on data privacy and security matters.
• Strong knowledge of privacy and data protection laws and regulations, including comprehensive U.S. state privacy laws, CPRA, VDCPA, CMIA, state breach notification requirements, HIPAA, GDPR, TCPA, and CAN-SPAM.
• Demonstrated ability to assess privacy, data protection, cybersecurity, and AI-related legal risks and develop practical strategies to mitigate those risks.
• Significant experience drafting, reviewing, and negotiating AI, privacy, data protection, and security-related contracts and provisions.
• Experience handling data loss prevention and cybersecurity events, forensic investigations, breach notifications, and cybersecurity preparedness.
• Experience managing privacy and/or cybersecurity incident response activities.
• Experience with privacy litigation and regulatory enforcement matters is a plus.
• Strong understanding of emerging technologies, with interest or experience in healthcare, life sciences, AI, and related technology environments.
• Privacy or AI certifications such as CIPP-US, CIPP-C, CIPP-E, CIPM, AIGP, or CHPC are advantageous.
• Excellent written, verbal, negotiation, and stakeholder communication skills, with the ability to explain complex legal concepts clearly to technical and non-technical audiences.
• Strong organizational, project management, and prioritization abilities, with the capacity to manage multiple complex matters simultaneously.
• Self-motivated, detail-oriented, collaborative, and comfortable taking initiative and leading projects independently.
• Demonstrated integrity, professionalism, sound judgment, and commitment to high-quality legal work.

Benefits

• Annual salary of $175,000–$205,500 , depending on experience.
• Medical, dental, and vision insurance.
• Life insurance coverage.
• 401(k) retirement benefits.
• Paid time off.
• Fully remote work opportunity within the United States.
• Opportunity to work across privacy, cybersecurity, AI governance, healthcare, life sciences, and emerging technologies.
• Broad exposure to U.S. and international regulatory and compliance matters.
• Strategic partnership with legal, compliance, information security, data governance, IT, and business leadership teams.

How Jobgether works:

We use an AI-powered matching process to ensure your application is reviewed quickly, objectively, and fairly against the role's core requirements. Our system identifies the top-fitting candidates, and this shortlist is then shared directly with the hiring company. The final decision and next steps (interviews, assessments) are managed by their internal team.

We appreciate your interest and wish you the best!

Data Privacy Notice: By submitting your application, you acknowledge that Jobgether will process your personal data to evaluate your candidacy and share relevant information with the hiring employer. This processing is based on legitimate interest and pre-contractual measures under applicable data protection laws (including GDPR). You may exercise your rights (access, rectification, erasure, objection) at any time.

#LI-CL1

We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses and identifying potential inconsistencies or verification signals in application materials based on available information. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.