Corp Counsel III (Privacy, Digital Risk, and Cybersecurity)

premierinc; United States; Remote; USD 170,000 - 230,000; Full time

Job summary

Premier's Privacy Office seeks a Corporate Counsel III specializing in privacy, digital risk, and cybersecurity to advise on HIPAA, state privacy laws, PCI DSS, and NIST. You will act as principal legal expert for cybersecurity regulatory compliance and partner with the AI & Data Analytics teams to translate regulatory requirements into practical processes and contracts.

The role requires proactive, business-minded counsel who can operate across cross-functional teams, lead governance program

Qualifications

• Juris Doctorate required and active U.S. license to practice law.
• 7+ years of relevant legal experience advising on privacy, cybersecurity, or digital regulatory matters.
• Experience operationalizing privacy, AI governance, and digital risk programs.

Responsibilities

• Provide regulatory compliance oversight for privacy, cybersecurity, and digital laws (HIPAA, state privacy laws, PCI DSS, NIST).
• Advise on website terms, data processing, and privacy-by-design in business initiatives.
• Lead risk reviews, privacy impact assessments, and vendor cybersecurity assessments.
• Draft and negotiate complex terms related to privacy and cybersecurity contracts.
• Collaborate with IT, security, business teams, and outside counsel to implement governance programs.
• Monitor evolving privacy and cybersecurity requirements and communicate impact to stakeholders.
• Support incident investigations, regulatory reporting, and governance modernization.

Skills

Privacy governance

AI governance

Regulatory compliance

Education

Juris Doctorate

Tools

OneTrust

Transcend

Job description

Corp Counsel III (Privacy, Digital Risk, and Cybersecurity)

What you will be doing:

Working as part of Premier's Privacy Office, the Corporate Counsel III (Privacy, Digital Risk, and Cybersecurity) advises Premier on compliance with applicable privacy, cybersecurity, and digital laws, regulations, and industry frameworks, including U.S. state privacy laws, HIPAA and HITECH, PCI DSS, and NIST.

This position will serve as the team's principal legal specialist for cybersecurity regulatory compliance, while partnering with the Corporate Counsel III (Privacy, Digital & AI) on privacy compliance and digital risk oversight. The attorney will provide practical, risk-based guidance to Premier's business teams, AI & Data Analytics organization, and Legal team.

This role will partner cross-functionally to continuously improve, operationalize, and evolve Premier's privacy, cybersecurity, and digital governance programs. The attorney will work closely with the Security and Technology teams to translate applicable regulatory requirements into practical, scalable processes and controls supporting supplier privacy and vendor cybersecurity assessments, privacy impact assessments, privacy-related cybersecurity audit requirements, online privacy and digital compliance, and specialized privacy and cybersecurity contract negotiations. The attorney will also monitor evolving privacy, cybersecurity, and digital legal requirements and advise relevant stakeholders on their impact.

The ideal candidate is a highly proactive, business-minded attorney who enjoys building and evolving governance programs and processes, works well independently and collaboratively, and provides clear, decisive recommendations. The candidate should thrive in a fast-paced, complex environment and collaborate effectively with senior management, IT and cybersecurity teams, business teams, vendors, customers, and outside counsel.

Key Responsibilities

Responsibility #1- 100%

• Support Premier's regulatory compliance with applicable privacy and cybersecurity laws, and related industry frameworks, including proactively monitoring and interpreting developing laws and frameworks.
• Provide legal oversight and guidance regarding Premier's digital compliance risks, including website and application terms & conditions, online tracking technologies, digital accessibility requirements, digital asset disclosures, and employee data access policies.
• Support enterprise innovation and growth by incorporating privacy, cybersecurity, and digital compliance-by-design principles from the outset of those initiatives.
• Conduct enterprise legal risk reviews across privacy, cybersecurity, and digital matters, including privacy impact assessments, data subject rights requests, supplier privacy reviews, and vendor cybersecurity assessments, and support AI impact assessments involving privacy, cybersecurity, or digital compliance issues.
• Contribute to continued modernization and development of Premier's Digital & Data Legal and Governance organization, digital & data policies and procedures, and overall risk governance framework across privacy, cybersecurity, and digital.
• Provide legal counsel for security and privacy incident investigations, mitigations, response, and regulatory reporting, partnering with internal stakeholders and external parties as needed.
• Serve the AI & Data Analytics Office and Legal as a primary legal specialist across privacy, cybersecurity, and digital regulatory compliance and risk.
• Maintain related policies and contract templates, and draft and negotiate specialized or complex contract terms related to those areas.

Required Qualifications

Work Experience:

• Years of Applicable Experience - 7 or more years

Education:

• Juris Doctorate (Required)

Required Certifications/Licensing:

• Active license in good standing to practice law in at least one U.S. jurisdiction, with eligibility to serve as in-house counsel as required.

Preferred Qualifications

Skills:

• One or more relevant privacy or AI governance certifications, such as CIPP/US, CIPP/E, CIPM, CIPT.
• Experience operationalizing privacy, AI, and digital risk programs and related processes.
• Familiarity with OneTrust, Transcend, or similar privacy or AI governance platforms.

Experience:

• At least 5 years of relevant legal experience, preferably 5 to 7 or more years , advising on privacy, cybersecurity, digital compliance, technology, or related regulatory matters in a law firm, in-house legal department, government agency, or comparable environment.
• Substantive knowledge of U.S. privacy and data protection laws , including HIPAA and HITECH, state comprehensive privacy laws, state consumer health data laws, data breach notification laws, and other requirements governing the collection, use, disclosure, retention, and protection of personal information.
• Demonstrated experience interpreting cybersecurity laws, regulations, and recognized cybersecurity frameworks, including the ability to identify legal, regulatory, an