Senior Counsel - Data Governance, Privacy, and Cybersecurity

Cencora; Eastbourne; On-site; USD 121,000 - 187,000; Full time

Job summary

An innovative company is seeking a skilled attorney to lead strategic legal efforts in data governance, privacy, and cybersecurity. This role is pivotal in navigating complex legal landscapes across North America and Latin America, focusing on emerging issues in artificial intelligence. The ideal candidate will possess strong analytical skills and a business-oriented mindset, capable of providing insights to compliance teams and developing governance frameworks. Join a forward-thinking organization committed to creating healthier futures, where your expertise will directly impact lives and shape the future of data management.

Benefits

Health Benefits

Professional Development

Mentorship Programs

Employee Support Groups

Volunteer Opportunities

Qualifications

• 5-7 years of experience as a lawyer focusing on privacy and cybersecurity.
• In-house experience with multinational or healthcare companies preferred.

Responsibilities

• Advise on legal questions related to data privacy and cybersecurity.
• Draft and negotiate contracts focusing on privacy and data protection.
• Manage multiple projects and prioritize high-risk initiatives.

Skills

Data Governance

Privacy Law

Cybersecurity

Artificial Intelligence Regulations

Analytical Skills

Project Management

Negotiation Skills

Communication Skills

Education

Juris Doctor (JD)

Job description

Our team members are at the heart of everything we do. At Cencora, we are united in our responsibility to create healthier futures, and every person here is essential to us being able to deliver on that purpose. If you want to make a difference at the center of health, come join our innovative company and help us improve the lives of people and animals everywhere. Apply today!

Job Details

Position Summary:
Cencora seeks an attorney with significant experience in data governance, privacy, cybersecurity, and emerging artificial intelligence issues to provide strategic legal advice on data risk management and innovation. This role reports to the Assistant General Counsel - Data Governance, Privacy, and Cybersecurity and collaborates with legal, business, and functional teams across the enterprise.

The role requires expertise in US, Canada, and LA privacy, cybersecurity, and AI laws, regulations, and guidance, with routine analysis of HIPAA and healthcare privacy laws.

The successful candidate should have strong analytical skills, business-oriented legal acumen, and project management capabilities, providing strategic insights to compliance teams and developing governance for emerging data and technology law areas.

Primary Duties and Responsibilities:

1. Advise on complex legal, regulatory, and policy questions related to data privacy, protection (including HIPAA, state privacy laws, Canadian laws), cybersecurity (e.g., CMMC, NIST, ISO 27001, HITRUST), and artificial intelligence (e.g., NIST RMF, state and local AI laws).
2. Draft, review, and negotiate contracts, including healthcare and HIPAA-related agreements, focusing on privacy, cybersecurity, AI, and data protection. Develop templates and playbooks to streamline contract management.
3. Assess and mitigate harms from privacy and cybersecurity incidents through communication, issue escalation, and stakeholder partnership.
4. Review technology proposals involving privacy, cyber, and AI risks, providing pragmatic, privacy-by-design solutions.
5. Demonstrate strong decision-making and communication skills during incidents or high-risk proposals requiring escalation.
6. Manage multiple projects efficiently, prioritizing high-value and high-risk initiatives strategically.

Experience and Education Requirements

Minimum 5-7 years as a lawyer, with focus on privacy, data governance, and cybersecurity. In-house experience and work with multinational or healthcare companies preferred. Must be a graduate of an accredited law school, admitted to and in good standing with a US state bar. This role is akin to a senior associate in a law firm, capable of sophisticated counseling with limited supervision.

Minimum Skills, Knowledge, and Abilities:

• Knowledge of privacy, cybersecurity, AI laws across NA and LA, including cyber disclosures to bodies like SEC. Healthcare laws like HIPAA are a plus.
• Ability to communicate themes across jurisdictions for risk management in multi-country tech launches or investments.
• Experience managing outside counsel and liaising with legal and technical experts.
• Ability to understand new business models and technology trends, integrating legal requirements with business strategy.
• Experience advising senior management, with clear risk communication and mitigation strategies.
• Calm and confident soft skills for incident management and risk escalation.
• Collaborative skills with compliance teams, providing operational guidance.
• Privacy, AI, or security certifications (e.g., CIPP, CIPM, CISSP) preferred.
• Negotiation, prioritization, multitasking, and client management skills to build strong relationships.

What Cencora offers

We offer competitive compensation, benefits, and resources fostering an inclusive culture supporting purpose-driven work. Benefits include health, wellness, family support, professional development, mentorship, employee groups, and volunteer opportunities. Details at https://www.virtualfairhub.com/cencora.

Position Type: Full-time

Salary Range*

$121,000 - $186,230
*Salary varies by location, with adjustments in Colorado, California, Washington, New York, Hawaii, Vermont, Minnesota, Massachusetts, Illinois.

Equal Employment Opportunity

Cencora is committed to equal opportunity employment, non-discrimination, and providing reasonable accommodations for individuals with disabilities. For accommodation requests, contact 888.692.2272 or [e-mail]. Messages unrelated to accommodations will not be responded to.

Affiliated Company: AmerisourceBergen Services Corporation