Senior Counsel – Data Governance, Privacy, Cybersecurity
Employment Information
Report this job
Job expired or something wrong with this job?
Job Description
Senior Counsel guiding Cencora’s healthcare services organization on data privacy, cybersecurity, AI, and governance. Advising on regulated health data, contracts, incident response, and technology-enabled offerings.
Responsibilities:
- Advise on data governance, privacy, AI, and cybersecurity matters for Cencora’s Managed Services Organization (MSO)
- Advise on MSO data flows, operating models, PHI, sensitive data, and U.S. federal and state privacy and security requirements
- Counsel business owners on privacy, security, and AI requirements for MSO offerings, platforms, analytics, care and therapy support, and population health services
- Conduct privacy-by-design and security-by-design reviews
- Draft, review, and negotiate BAAs, DPAs, data sharing agreements, service agreements, and vendor/partner security addenda
- Advise on third-party risk management, subcontractor flow-downs, and MSO client requirements
- Partner with information security and technology teams on NIST-aligned controls and HITRUST/ISO considerations
- Support incident response preparedness, breach assessments, notification obligations, and incident-related communications
- Support governance and reporting, client audits, questionnaires, and regulatory inquiries
- Establish stakeholder relationships and escalation paths to enable scalable data governance, privacy, security, and data innovation approaches
Requirements:
- Minimum 4–8 years of experience as a lawyer, combined with expertise in privacy, cybersecurity, and/or data governance
- Law degree from an accredited law school
- Admission to a U.S. state bar
- Working familiarity with HIPAA/HITECH, state privacy laws, consumer health privacy laws, SEC cybersecurity disclosure rules, AI regulatory frameworks, NIST CSF/800-53, and commonly used security standards
- Knowledge of healthcare business and industry models, practices, trends, and competitive landscape
- Strong decision-making and business-oriented legal communication skills
- Ability to solve straightforward and complex problems
- Ability to multitask, prioritize deliverables, and manage multiple matters
- Willingness to embrace change and shift priorities
- Effective oral and written communication
- Collaboration, negotiation, presentation, organizational savvy, creativity, and legal trend-spotting skills
- Attention to detail and ability to learn new technologies relevant to clinical data insights
- Proficiency in Microsoft Word, Excel, PowerPoint, Teams, SharePoint, and associated AI capabilities
Benefits:
- Medical, dental, and vision care
- Backup dependent care
- Adoption assistance
- Infertility coverage
- Family building support
- Behavioral health solutions
- Paid parental leave
- Paid caregiver leave
- Training programs
- Professional development resources
- Mentorship programs
- Employee resource groups
- Volunteer activities
Similar Jobs
Adjunct Faculty, Cybersecurity for Leaders and Managers
Cybersecurity adjunct faculty teaching CSIA 300 asynchronously for University of Maryland Global Campus. Mentoring adult learners and supporting their academic and professional growth.
Adjunct Faculty – Microsoft 365 Endpoint Administration, Cybersecurity
Adjunct faculty teaching Microsoft 365 Endpoint Administration at UMGC, an online university serving nontraditional learners. Mentoring students through asynchronous, hands-on cybersecurity coursework.
Security Advisor II, Falcon Complete
Security Advisor guiding CrowdStrike Falcon Complete customers toward stronger security postures. Assessing Falcon environments, recommending remediation, and resolving customer issues.
Senior Director – Security Posture & Exposure Management
Senior security leader overseeing Lilly’s enterprise vulnerability management and exposure reduction. Leading teams, tooling, prioritization, remediation, and executive risk reporting for a global medicines company.
Infrastructure Security Vulnerability Engineer
Infrastructure Security Vulnerability Engineer reducing vulnerability risk across Avaya’s FedRAMP cloud environments. Coordinating remediation, compliance, reporting, and security improvements for federal-government operations.
Cybersecurity Specialist
Cybersecurity Specialist monitoring alerts and investigating incidents for CyberMaxx’s managed detection and response cybersecurity services. Supporting threat detection, customer response, and SOC operations.
Senior Information Security Engineer
Information Security Engineer monitoring threats and vulnerabilities for First American's title insurance, settlement, and property technology solutions. Operating security tools, incident response, risk analysis, and recovery processes.
Senior Information Security Engineer
Senior Cloud Security Engineer operating CNAPP platforms and securing cloud environments at First American India. Driving cloud risk remediation across infrastructure, applications, Kubernetes, and DevSecOps teams.
Senior Security Consultant
Senior Security Consultant designing low-voltage and communication systems for ARES data center infrastructure projects. Coordinating BIM, documentation, budgets, and project stakeholders.
Red Team Security Engineer
Red Team Security Engineer validating vulnerabilities, attack paths, and AI-enabled systems. Strengthening defenses for Backblaze’s open cloud storage platform through offensive and purple-team exercises.
Online Visiting Professor – Cybersecurity
Online Visiting Professor teaching undergraduate and graduate cybersecurity courses for DeVry University. Developing course materials, assessing students, and integrating responsible AI into instruction.
Information Security Specialist
Information Security Specialist protecting Farmers’ global insurance systems and data from cybersecurity risks. Assessing vulnerabilities, managing incidents, strengthening controls, and advising technology teams.
Strategic Solution Sales Executive – Cybersecurity
Strategic cybersecurity sales executive driving OpenText solution growth across U.S. enterprise accounts. Leading complex solution sales cycles and executive stakeholder engagements.
Security Cooperation Financial Management Specialist – Lead
Financial management specialist supporting U.S. Combatant Commands with DAI accounting, audit readiness, and process improvement. Remote role for Koniag Government Services’ federal defense operations.
Manager, Application Security – SOX IT, Oracle Fusion
Application Security Manager securing Oracle Fusion, EPM, and OIC environments for Paramount’s global media and entertainment company. Leading SOX compliance, identity governance, and segregation-of-duties controls.
Senior Security Engineer, Threat Detection and Response
Senior Security Engineer investigating threats, building detection automation, and improving incident response. Supporting U.S.-based corporate and production environments through security engineering and threat hunting.
Staff Security Engineer, Security Enablement
Staff Security Engineer designing DoorDash’s global physical and cloud security systems. Leading multi-team programs, AWS infrastructure, security integrations, and enterprise risk reduction.
Cybersecurity Intern
Cybersecurity Intern gaining hands-on experience in security operations, vulnerability management, and incident response. Supporting cybersecurity projects at global electronics manufacturer Kimball Electronics.
Ethical Hacker – Penetration Tester
Pentester conduzindo avaliações ofensivas em infraestrutura, aplicações, redes Wi-Fi e soluções de IA. Grupo Trade Technology oferece tecnologia, segurança e transformação digital.
Staff Mobile Security Engineer
Staff Mobile Security Engineer securing MrBeast’s large-scale mobile media, gaming, and fintech experiences. Owning device integrity, fraud defense, and security engineering team growth.