Compliance Counsel - Remote

Our global team of more than 7,000 employees is committed to creating and delivering next-generation commercialization services to the life sciences industry. We are grounded in our cultural beliefs and serve more than 650 clients ranging from innovative biotech start-ups to established pharmaceutical companies. Our products, services and solutions help bring innovative therapies to market and support the patients who depend on them. Across our growing organization, we embrace diversity in backgrounds and experiences. Improving patient lives around the world is a priority, and we need people from all backgrounds and swaths of life to help build the future of the healthcare and the life sciences industry. We are deliberate and self-reflective about the kind of team and culture we are building. We are a forward-thinking, agile legal team dedicated to safeguarding the trust between people and the organizations that serve them. In a world where data is the new currency, we believe privacy is a fundamental right—not a privilege. Our mission is to help our internal clients and customers innovate responsibly, ensuring that personal information is handled with integrity, transparency, and compliance with evolving global regulations. As part of a health science services company, we support the responsible use of sensitive health, research, and business data in a manner that advances better outcomes while maintaining the highest standards of privacy, ethics, and compliance.

As Privacy Counsel, you will report into the Privacy Office and serve as a key member of our in-house legal team, helping shape how our company navigates the complex and rapidly changing privacy landscape. Your work will directly influence how our organization protects sensitive information, supports health science services, responds to data incidents, and designs privacy-first processes, products, and services. You won’t just interpret the law—you’ll help define and operationalize best practices that set the standard for ethical data use across our business.

Advise internal business teams on compliance with U.S. federal and state privacy laws (e.g., CCPA/CPRA, HIPAA, GLBA) and international frameworks (e.g., GDPR, UK GDPR), with a particular focus on laws and guidance relevant to health science services and sensitive health-related information.

Draft, review, and negotiate privacy-related agreements, including data processing addenda, vendor agreements, customer agreements, business associate agreements, and cross-border data transfer arrangements.

Develop and implement privacy policies, notices, consent management strategies, and internal governance frameworks tailored to a health science services environment.

Guide internal stakeholders through incident response, including breach notification requirements, escalation procedures, risk assessments, and regulatory reporting.

Conduct privacy impact assessments (PIAs) and data protection impact assessments (DPIAs) for new products, services, systems, and data uses.

Monitor legislative developments and advise on emerging privacy trends, technologies, and enforcement actions affecting the company’s operations.

Collaborate closely with cross-functional teams—including IT, security, compliance, marketing, product, operations, and research-focused teams to embed privacy into business operations.

Provide practical, risk-based legal advice to internal clients on the collection, use, sharing, retention, and de-identification of personal and health-related information.

Demonstrate a commitment to diversity, equity, and inclusion through continuous development, modeling inclusive behaviors, and proactively managing bias.

Consistent with the Americans with Disabilities Act (ADA) and applicable state and local laws, it is the policy of EVERSANA to provide reasonable accommodation when requested by an employee with a disability, unless such accommodation would cause an undue hardship for EVERSANA. Travel (Less than 10%)

Hours (Monday-Friday, 40+ hours per week)

Juris Doctor (JD) from an accredited law school and active bar membership in at least one U.2-4 years of experience practicing law with a focus on data privacy, cybersecurity, technology law, or healthcare regulatory matters, including Corporate experience (preferred) or prior in-house experience (a plus) or substantial experience advising corporate clients.

Demonstrated operational experience in data privacy programs, including direct involvement in real-world implementations and support of business operations

Proven ability to manage and respond to data privacy incidents (e.g., data breaches, unauthorized disclosures), including risk assessment, legal analysis, and coordination with cross-functional teams

Strong working knowledge of major privacy laws and regulatory frameworks (GDPR, CCPA/CPRA, HIPAA, and similar laws).

Experience drafting and negotiating privacy-related contractual provisions in a commercial setting.

Experience supporting privacy compliance in the healthcare, health technology, life sciences, or health science services sector.

Familiarity with privacy technologies, data governance tools (OneTrust TrustArc, Osano), and operational privacy compliance processes.

Data privacy certifications such as CIPM, CIPP/E, or AIGP are a plus.

Exceptional research, analytical, and communication skills—able to translate complex legal concepts into clear, actionable guidance for business stakeholders.

A proactive, solutions-oriented mindset with the ability to balance legal risk and business objectives in a fast-paced, fully remote environment.

Office: While performing the essential functions of this job the employee is frequently required to reach, grasp, stand and/or sit for long periods of time (up to 90% of the shift), walk, talk and hear; Embrace Diversity I create an environment of awareness and respect.

Always Innovate I am bold and creative in everything I do.

Recruitment fraud is a sophisticated scam commonly perpetrated through online services using fake websites, unsolicited e-mails, or even text messages claiming to be a legitimate company. Some of these scams request personal information and even payment for training or job application fees. Please know EVERSANA would never require personal information nor payment of any kind during the employment process. We respect the personal rights of all candidates looking to explore careers at EVERSANA.

Compensation will be determined based on relevant experience, other job-related qualifications/skills, and geographic location (to account for comparative cost of living). From EVERSANA’s inception, Diversity, Equity & Inclusion have always been key to our success. Diversity not only includes race and gender identity, but also age, disability status, veteran status, sexual orientation, religion, and many other parts of one’s identity. All of our employees’ points of view are key to our success, and inclusion is everyone's responsibility.

Consistent with the Americans with Disabilities Act (ADA) and applicable state and local laws, it is the policy of EVERSANA to provide reasonable accommodation when requested by a qualified applicant or candidate with a disability, unless such accommodation would cause an undue hardship for EVERSANA. The policy regarding requests for reasonable accommodations applies to all aspects of the hiring process. Follow us on LinkedIn | Twitter

#