Hybrid In-House Privacy Counsel (Reg & AI)

Great American Insurance Group; Cincinnati (OH); Hybrid; USD 120,000 - 160,000; Full time

Benefits offered by this job

Medical, dental, and vision coverage

Wellness plans

Parental leave

Tuition reimbursement

Paid time off and holidays

401(k) with company match

Employee stock purchase plan

Commuter benefits

Job summary

Great American Insurance Group seeks a practical Privacy Attorney to join its legal and compliance team. You will partner with business, technology, information security, compliance, and procurement to translate evolving privacy requirements into actionable, defensible solutions. The role emphasizes on‑site collaboration with a remote day as needed.

Ideal candidates have 4–5 years of privacy/regulatory experience, a JD, and an active U.S. license, with HIPAA experience considered a plus.

Qualifications

• JD from an accredited law school.
• Active license in at least one U.S. jurisdiction.
• 4–5 years of privacy, health information, cybersecurity, technology, or related regulatory practice; HIPAA a plus.

Responsibilities

• Support the privacy program's development, implementation, and maturation, including policies, procedures, training, governance, and third‑party contracting.
• Assist privacy and security incident response, including investigation, remediation, documentation, and regulator notifications.
• Draft, review, and negotiate privacy/data protection terms in commercial agreements (DPA, BAAs, AI provisions).
• Support compliance with privacy/data security laws (NYDFS Part 500, GLBA, CCPA/CPRA, HIPAA, GDPR, etc.).
• Monitor regulatory developments and translate them into practical recommendations, controls, and training.
• Develop relationships with internal clients and provide actionable, business‑oriented legal guidance.

Skills

Privacy

Data protection

Regulatory compliance

Stakeholder collaboration

Education

Juris Doctor (JD)

Job description

Great American Insurance Group seeks a practical Privacy Attorney to join its legal and compliance team. You will partner with business, technology, information security, compliance, and procurement to translate evolving privacy requirements into actionable, defensible solutions. The role emphasizes on‑site collaboration with a remote day as needed.

Ideal candidates have 4–5 years of privacy/regulatory experience, a JD, and an active U.S. license, with HIPAA experience considered a plus.