Data Privacy - Transactional Attorney in Albany, NY

In-House

Albany, NY

Data Privacy - Transactional Attorney in Albany, NY

Attorney

5-7 yrs required

No

Job Title: Senior Counsel - Data Governance, Privacy, and Cybersecurity

Job Responsibilities:
- Provide strategic legal advice on data governance, privacy, cybersecurity, and emerging artificial intelligence issues to address the company's data risk management and innovation priorities.
- Collaborate with legal, business, and functional teams across the enterprise, focusing on US, Canada, and Latin America-relevant privacy, cybersecurity, and AI laws, regulations, and regulatory/self-regulatory guidance.
- Analyze and offer legal advice regarding HIPAA and state-relevant healthcare privacy laws and regulations.
- Advise clients on complex legal, regulatory, and policy questions in data privacy, protection, cybersecurity, and AI, including federal and state laws, Canadian provincial laws, CMMC, NIST cybersecurity frameworks, ISO 27001, HITRUST, NIST RMF, and more.
- Draft, review, and negotiate various contracts, including healthcare and HIPAA-related agreements, addressing privacy, cybersecurity, AI, and data protection issues.
- Create template agreements and playbooks to expedite contracting issue management in privacy, cyber, and AI law arenas.
- Assess and help mitigate harms associated with privacy and cybersecurity incidents through clear communication, disciplined issue escalation, and partnership with stakeholders.
- Conduct reviews of technology proposals entailing privacy, cyber, and/or AI risks and offer pragmatic, creative solutions reflecting privacy and security by design concepts.
- Demonstrate strong decision-making capability and communication skills in time-sensitive incidents or high-risk business proposals requiring escalation to senior leadership.
- Manage competing projects with agility, effectively multi-tasking and prioritizing work to address high-value and/or high-risk business needs and projects efficiently.

Education and Experience Information:
- Minimum of 5-7 years of experience as a lawyer, focusing on privacy, data governance, and cybersecurity.
- Prior in-house experience and cross-functional collaboration working for a multi-national company are preferred.
- Substantial legal work with or for healthcare companies is ideal.
- Graduate of an accredited law school, admitted, and in good standing with a US state bar.
- Comparable to a seasoned, senior associate in a law firm, capable of conducting sophisticated counseling and internal client management with limited supervision.

Minimum Skills, Knowledge, and Ability Requirements:
- Familiarity with privacy, cybersecurity, emerging AI, and related laws and regulations across North America and Latin America.
- Knowledge of healthcare-specific laws, particularly HIPAA, is a plus.
- Ability to communicate consistent themes across jurisdictions for pragmatic risk management counseling.
- Experience managing outside counsel and liaising with experts engaged to work on matters.
- Capability to grasp existing and new business models and technology trends, aligning legal requirements with business strategy.
- Experience advising and presenting to all levels of business management, including senior leadership.
- Strong soft skills for incident management and risk escalation, projecting calm and confidence.
- Experience collaborating with compliance professionals, advising on compliance requirements, and defining operational targets.
- Preferred possession of privacy, AI, and/or information security certifications (CIPP, CIPM, AIGP, CIPT, CISSP).
- Excellent negotiating, prioritization, multi-tasking, and client management skills, including managing relationships to ease conflicts when new issues arise.

Salary Information:
- Full-time
- Salary Range: $121,000 - $186,230 (National Average)
- Actual range may vary based on location, with specific state variations.

Equal Employment Opportunity:
- The company is committed to equal employment opportunities regardless of race, color, religion, sex, sexual orientation, gender identity, genetic information, national origin, age, disability, veteran status, or membership in any protected class.
- Harassment is prohibited, and all employment-related matters comply with equal opportunity principles.
- The company provides reasonable accommodations for individuals with disabilities during the employment process.

Affiliated Companies:
- AmerisourceBergen Services Corporation