Director, Corporate Counsel

TruLegal; Denver (CO); Hybrid; USD 115,000 - 155,000; Full time

Job summary

TruLegal in Denver seeks a Director, Corporate Counsel – Privacy to provide enterprise privacy guidance across our healthcare operations. You will advise business leaders on HIPAA, HITECH, state privacy laws, data use, and AI development, and support contract negotiations and privacy program enhancements.

The ideal candidate is a licensed attorney with at least four years of privacy law experience, active bar membership (Colorado waiver possible), and CIPM/CIPP certification preferred.

Qualifications

• Juris Doctor degree with ≥4 years of relevant legal experience.
• Active state bar membership; Colorado admission via waiver possible.
• At least 2 years of professional privacy law experience.
• CIPP or CIPM certification preferred.
• Healthcare industry experience desirable.

Responsibilities

• Provide legal counsel on privacy matters affecting the organization's integrated healthcare operations.
• Advise stakeholders on HIPAA, state privacy laws, data use and AI privacy.
• Review, negotiate contracts and business associate agreements involving privacy.
• Collaborate with privacy attorneys to translate regulatory obligations into operational requirements.
• Support privacy program improvements and procedural updates in the organization.
• Travel approximately 5% as needed.

Education

Juris Doctor degree

Job description

Our client, a leading healthcare organization, is seeking a Director, Corporate Counsel – Privacy to provide legal guidance on enterprise-wide privacy compliance, corporate initiatives, and integrated healthcare operations. This role will advise business leaders on HIPAA, HITECH, state privacy regulations, data use, AI development, and other privacy-related matters while supporting contract negotiations, business associate agreements, and privacy program improvements. The ideal candidate will be a licensed attorney with a strong background in privacy law, experience advising cross-functional business teams, and the ability to navigate complex regulatory requirements in a fast-paced environment. Healthcare industry experience and CIPP or CIPM certification are preferred. This position is ideally hybrid in Denver, Colorado, but remote candidates located anywhere in the U.S. will also be considered.

Essential Duties and Responsibilities

• Provide legal counsel on privacy matters affecting the organization's integrated kidney care operations
• Deliver comprehensive legal analysis and practical recommendations to business stakeholders regarding operational projects and strategic initiatives
• Collaborate with fellow privacy attorneys and Privacy Operations personnel to coordinate legal advice and translate regulatory obligations into operational requirements
• Identify emerging privacy concerns and proactively advise business and legal teams on HIPAA, applicable state privacy laws, and other relevant regulatory requirements
• Review, advise on, and negotiate contracts and business associate agreements involving privacy considerations
• Partner strategically with business leadership to understand operational objectives and develop solutions that achieve business goals while maintaining privacy compliance
• Work alongside internal attorneys, compliance professionals, and business stakeholders to evaluate and resolve legal questions involving data use, artificial intelligence development, and related privacy matters
• Contribute to initiatives and projects managed by the Privacy Office's legal function
• Support improvements to privacy programs, operational procedures, and internal compliance processes
• Assist with leading legal privacy projects and coordinating related initiatives
• Travel occasionally as needed, approximately 5%

Experience and Education

• Juris Doctor degree and a minimum of 4 years of relevant legal experience
• Active membership in good standing with at least one state bar, including the ability to obtain admission in Colorado through waiver if necessary
• At least two years of professional experience practicing privacy law
• CIPP or CIPM certification is preferred
• Previous experience working within the healthcare industry is desirable
• Knowledge of healthcare privacy compliance involving federal and state regulations, including HIPAA, HITECH, and state breach notification requirements, is advantageous
• Demonstrated experience drafting and negotiating technology agreements, data-related contracts, and other legal documents involving healthcare operations
• Ability to balance competing legal matters and shifting priorities within a demanding, fast-paced business environment
• Demonstrate sound professional judgment, maturity, and a collaborative approach when working with colleagues and stakeholders
• Strong analytical reasoning and decision-making abilities, including recognizing matters requiring timely escalation
• Excellent verbal, written, and interpersonal communication skills, with the ability to listen effectively and engage professionals across all organizational levels

Expected salary for this role is $115,000 - $155,000 commensurate with experience, training, skills, qualifications, and other market factors.