Corp Counsel III (Privacy, Digital Risk, and Cybersecurity)

Premier, Inc.; United States; Remote; USD 141.000 - 234.000; Vollzeit

Benefits dieser Stelle

Health, dental, vision, life and DI

401k retirement program

Paid time off

Incentive plans

Tuition reimbursement

Zusammenfassung

Premier, Inc. is seeking a Corporate Counsel III to lead privacy, digital risk, and cybersecurity regulatory compliance across the enterprise.

The role involves advising on HIPAA/HITECH, state privacy laws, PCI DSS, and NIST, and acting as the prime legal specialist for cybersecurity regulatory compliance. The attorney will partner with the AI & Data Analytics Office and other Legal teams to translate regulatory requirements into practical governance, policies, and contract terms, while

Qualifikationen

• 7+ years of applicable experience in privacy, cybersecurity, or digital compliance.
• Juris Doctorate (required).
• Active license to practice law in at least one U.S. jurisdiction, with eligibility to serve in-house.
• Substantial knowledge of U.S. privacy and data protection laws (e.g., HIPAA, HITECH, state privacy laws).
• Experience interpreting cybersecurity laws and frameworks (e.g., NIST, PCI).
• Experience drafting and negotiating privacy, cybersecurity, and data protection provisions in contracts.

Aufgaben

• Provide legal oversight for privacy, cybersecurity, and digital compliance programs.
• Advise on website/app disclosures, online tracking, cookies, and accessibility requirements.
• Conduct privacy/digital risk assessments and vendor cybersecurity reviews.
• Draft, review, and negotiate privacy and data protection provisions in agreements.
• Collaborate with IT, security, and business teams to implement controls.

Kenntnisse

Privacy compliance

Cybersecurity

Regulatory compliance

Risk governance

Data privacy

AI governance

Ausbildung

Juris Doctorate

Tools

OneTrust

Transcend

Jobbeschreibung

Corp Counsel III (Privacy, Digital Risk, and Cybersecurity)

Working as part of Premier’s Privacy Office, the Corporate Counsel III (Privacy, Digital Risk, and Cybersecurity) advises Premier on compliance with applicable privacy, cybersecurity, and digital laws, regulations, and industry frameworks, including U.S. state privacy laws, HIPAA and HITECH, PCI DSS, and NIST. This position will serve as the team’s principal legal specialist for cybersecurity regulatory compliance, while partnering with the Corporate Counsel III (Privacy, Digital & AI) on privacy compliance and digital risk oversight. The attorney will provide practical, risk-based guidance to Premier’s business teams, AI & Data Analytics organization, and Legal team. This role will partner cross-functionally to continuously improve, operationalize, and evolve Premier’s privacy, cybersecurity, and digital governance programs. The attorney will work closely with the Security and Technology teams to translate applicable regulatory requirements into practical, scalable processes and controls supporting supplier privacy and vendor cybersecurity assessments, privacy impact assessments, privacy-related cybersecurity audit requirements, online privacy and digital compliance, and specialized privacy and cybersecurity contract negotiations. The attorney will also monitor evolving privacy, cybersecurity, and digital legal requirements and advise relevant stakeholders on their impact. The ideal candidate is a highly proactive, business-minded attorney who enjoys building and evolving governance programs and processes, works well independently and collaboratively, and provides clear, decisive recommendations. The candidate should thrive in a fast-paced, complex environment and collaborate effectively with senior management, IT and cybersecurity teams, business teams, vendors, customers, and outside counsel.

Key Responsibilities

• Support Premier’s regulatory compliance with applicable privacy and cybersecurity laws, and related industry frameworks, including proactively monitoring and interpreting developing laws and frameworks.
• Provide legal oversight and guidance regarding Premier’s digital compliance risks, including website and application terms & conditions, online tracking technologies, digital accessibility requirements, digital asset disclosures, and employee data access policies.
• Support enterprise innovation and growth by incorporating privacy, cybersecurity, and digital compliance‑by‑design principles from the outset of those initiatives.
• Conduct enterprise legal risk reviews across privacy, cybersecurity, and digital matters, including privacy impact assessments, data subject rights requests, supplier privacy reviews, and vendor cybersecurity assessments, and support AI impact assessments involving privacy, cybersecurity, or digital compliance issues.
• Contribute to continued modernization and development of Premier’s Digital & Data Legal and Governance organization, digital & data policies and procedures, and overall risk governance framework across privacy, cybersecurity, and digital.
• Provide legal counsel for security and privacy incident investigations, mitigations, response, and regulatory reporting, partnering with internal stakeholders and external parties as needed.
• Serve the AI & Data Analytics Office and Legal as a primary legal specialist across privacy, cybersecurity, and digital regulatory compliance and risk.
• Maintain related policies and contract templates, and draft and negotiate specialized or complex contract terms related to those areas.

Required Qualifications

Work Experience: Years of Applicable Experience - 7 or more years

Education: Juris Doctorate (Required)

Required Certifications/Licensing: Active license in good standing to practice law in at least one U.S. jurisdiction, with eligibility to serve as in‑house counsel as required.

Preferred Qualifications

Skills: One or more relevant privacy or AI governance certifications, such as CIPP/US, CIPP/E, CIPM, CIPT. Experience operationalizing privacy, AI, and digital risk programs and related processes. Familiarity with OneTrust, Transcend, or similar privacy or AI governance platforms.

Experience: At least 5 years of relevant legal experience, preferably 5 to 7 or more years, advising on privacy, cybersecurity, digital compliance, technology, or related regulatory matters in a law firm, in‑house legal department, government agency, or comparable environment.

Substantive knowledge of U.S. privacy and data protection laws, including HIPAA and HITECH, state comprehensive privacy laws, state consumer health data laws, data breach notification laws, and other requirements governing the collection, use, disclosure, retention, and protection of personal information.

Demonstrated experience interpreting cybersecurity laws, regulations, and recognized cybersecurity frameworks, including the ability to identify legal, regulatory, and compliance requirements arising under authorities and frameworks such as FISMA, NIST, and PCI SSD and translate those requirements into practical guidance for Cybersecurity, IT, compliance, and business teams.

Hands‑on experience conducting or providing legal oversight for privacy and digital risk assessments, including privacy impact assessments, records of processing activities, data subject request workflows, supplier privacy reviews, vendor cybersecurity assessments, and assessments of new products, technologies, data uses, or business initiatives.

Experience advising on digital compliance matters, including website and application privacy disclosures, online tracking technologies, cookies and consent requirements, digital terms and conditions, consumer‑facing data practices, and accessibility‑related legal requirements.

Experience supporting privacy and cybersecurity incident response, including conducting legal assessments, coordinating investigation and mitigation activities, determining contractual and regulatory notification obligations, preparing, or reviewing notifications, and working with affected business partners, customers, regulators, forensic providers, notification vendors, and outside counsel.

Experience drafting, reviewing, and negotiating privacy, cybersecurity, and data protection provisions in commercial agreements, including data processing agreements, business associate agreements, cybersecurity addenda, incident notification provisions, international data transfer terms, and privacy and cybersecurity requirements in customer and supplier contracts.

Experience advising business, product, technology, data, and cybersecurity stakeholders during the design or implementation of new products, services, systems, vendors, and data uses, with the ability to identify applicable requirements early and recommend practical controls or risk mitigations.

Experience developing, implementing, or materially improving privacy, cybersecurity, or digital governance programs, including policies, standards, procedures, assessment methodologies, templates, decision records, escalation protocols, training materials, and compliance workflows.

Additional Job Requirements

Remain in a stationary position for prolonged periods of time.

Be adaptive and change priorities quickly; meet deadlines.

Attention to detail.

Operate computer programs and software.

Ability to communicate effectively with audiences in person and in electronic formats.

Day‑to‑day contact with others (co‑workers and/or the public).

Making independent decisions.

Ability to work in a collaborative business environment in close quarters with peers and varying interruptions.

Working Conditions

Remote. Travel Requirements: Travel 1-20% within the US.

Physical Demands

Sedentary: Exerting up to 10 pounds of force occasionally, and/or a negligible amount of force frequently or constantly to lift, carry, push, pull or otherwise move objects, including the human body. Sedentary work involves remaining stationary most of the time. Jobs are sedentary if movement is required only occasionally, and all other sedentary criteria are met.

Compensation

Premier’s internal salary range for this role is $141,000 - $234,000. Final salary is dependent upon several market factors including, but not limited to, departmental budgets, internal equity, education, unique skills/experience, and geographic location. Premier utilizes a wide‑range salary structure to allow base salary flexibility within our ranges.

Benefits & Perks

• Health, dental, vision, life and disability insurance
• 401k retirement program
• Paid time off
• Participation in Premier’s employee incentive plans
• Tuition reimbursement and professional development opportunities
• Perks and discounts – Access to on‑site and online exercise classes

Company Culture

Premier at a glance: Granted World's Most Ethical Companies, Ethisphere, 2008‑2026. Named U.S. News & World Report, Best Companies to Work For (2023, 2024, 2025). Accredited by Forbes: America’s Best Management Consulting Firms 2024‑2025. Given Modern Healthcare Best in Business Awards: Consultants‑ Healthcare Management Awarded Cigna Workforce Designation Gold Level Recipient (2016,2017,2019,2020,2021,2022,2023,2025). For a listing of all of our awards, please visit the Awards and Recognition section on our company website.

Equal Opportunity Employer

Premier is an equal opportunity employer. Qualified applicants will receive consideration for employment without regard to unlawful discrimination because of their age, race, color, religion, national origin, ancestry, citizenship status, sex, sexual orientation, gender identity, gender expression, marital status, familial status, pregnancy status, genetic information, status as a victim of domestic violence, covered military or protected veteran status (e.g., status as a Vietnam Era veteran, disabled veteran, special disabled veteran, Armed Forces Serviced Medal veteran, recently separated veteran, or other protected veteran) disability, or any other applicable federal, state or local protected class, trait or status or that of persons with whom an applicant associates. We also consider qualified applicants with criminal histories, consistent with applicable federal, state and local law. In addition, as a federal contractor, Premier complies with government regulations, including affirmative action responsibilities, where they apply. EEO / AA / Disabled / Protected Veteran Employer. Premier also provides reasonable accommodations to qualified individuals with a disability or those who have a sincerely held religious belief. If you need assistance in the application process, please reply to [e-mail] or contact Premier Recruiting at 704.357.0022.

Privacy and Data Processing

Personal Information submitted will be processed in accordance with Premier’s Employee and Job Applicant Privacy Notice, which includes additional information about your privacy rights.

We will never ask for a financial commitment as part of our interview process with candidates. Any personal details collected in connection with a legitimate offer of employment will be sought only through Premier’s Human Resources platform.