Health Law Data Privacy & Cybersecurity & Corporate Special Counsel Attorney

Job Description

Job Description

Health Law Data Privacy & Cybersecurity & Corporate Special Counsel Attorney

Locations: Boston; New York; Washington, DC

Salary: $375,000–$420,000 + bonus eligibility

Work Arrangement: Approximately 60% in-office, consistent with firm guidelines

Direct Counsel is seeking a Health Law & Corporate Special Counsel to join an Am Law 100 law firm in a unique, cross-disciplinary role spanning health law, corporate transactions, data privacy, cybersecurity, AI, and digital health .

This is an excellent opportunity for a senior attorney who wants to work at the intersection of healthcare regulatory counseling and sophisticated corporate transactions . The Special Counsel will work across both the Health Law and Corporate practices, with approximately 60% of the practice focused on Health Law and 40% on Corporate matters , providing high-level guidance on complex privacy, cybersecurity, AI, and data issues while also playing an important role in M&A and private equity transactions.

The role offers substantial variety and the opportunity to become a trusted advisor on some of the most rapidly evolving issues facing healthcare and technology companies. The attorney will advise clients on HIPAA, privacy, digital health, cybersecurity, AI governance, data commercialization, technology contracting, vendor risk, incident response readiness, and scalable compliance programs , while also supporting transactional matters involving privacy and cybersecurity diligence.

The Special Counsel will work closely with partners, associates, clients, and cross-disciplinary teams , managing sophisticated workstreams with a high degree of independence. The role includes conducting privacy and cybersecurity diligence in M&A and private equity transactions, assessing regulatory and data-related risks, negotiating deal terms, advising on technology agreements, and helping clients develop practical compliance and risk-management strategies.

This position is particularly well suited for an attorney who enjoys combining technical legal expertise with practical, business-oriented counseling and wants exposure to both regulatory and transactional work.

Qualifications:

• JD or LLM from an ABA-accredited law school

• Admitted or eligible for admission in Massachusetts, New York, or Washington, DC

• 6+ years of relevant experience in privacy, cybersecurity, AI, digital health, healthcare regulatory, transactional, or technology/data matters

• Experience with HIPAA/privacy compliance, state and global privacy regimes, AI governance, and sector-specific regulatory frameworks

• Familiarity with major privacy and data protection frameworks, including CCPA/CPRA, GDPR, HIPAA, GLBA, COPPA, BIPA, CAN-SPAM, and TCPA

• Experience conducting privacy and cybersecurity diligence in M&A and private equity transactions

• Experience assessing data assets, technology infrastructure, regulatory exposure, and privacy/cybersecurity risks in transactions

• Experience negotiating privacy, security, and data-related provisions in acquisition agreements and commercial technology agreements

• Interest in or experience with AI regulatory developments and emerging AI governance frameworks

• Familiarity with cybersecurity risk management, incident response planning, vendor risk assessment, and security governance

• Strong judgment and ability to independently manage sophisticated workstreams and competing priorities

• Excellent written and verbal communication skills

• Ability to collaborate effectively across health regulatory and corporate transactional teams

• CIPP or other IAPP certification is a plus