In-House Counsel- Privacy

Great American Insurance Group; United States; On-site; USD 140,000 - 190,000; Full time

Benefits offered by this job

Medical insurance

Dental insurance

Vision insurance

Wellness plans

Parental leave

Adoption assistance

Tuition reimbursement

Paid Time Off

Job summary

Great American Insurance Group is seeking a practical Privacy Attorney to join its legal and compliance team.

You will partner with business, technology, information security, compliance, procurement, and legal stakeholders across a complex insurance organization to translate evolving legal requirements into clear, defensible, and operationally workable solutions and support the organization's privacy program.

Qualifications

• JD from an accredited law school.
• Active license to practice law in at least one U.S. jurisdiction.
• 4–5 years of privacy, health information, cybersecurity, technology, or related regulatory practice.
• HIPAA experience a plus.

Responsibilities

• Support development, implementation, and maturation of the privacy program, including policies, procedures, training, governance, and third‑party contracting.
• Support privacy and security incident response, including investigation, remediation, documentation, and regulator notifications under applicable laws.
• Draft, review, and negotiate privacy and data protection terms in privacy-related agreements (data processing agreements, BAAs, AI provisions).
• Assist with compliance with privacy and data security laws (NYDFS Part 500, GLBA, CCPA/CPRA, HIPAA, GDPR, etc.).
• Monitor regulatory developments and translate them into practical recommendations, policies, controls, training, and implementation plans.
• Develop trusted relationships with internal clients and provide actionable legal guidance and workable compliance frameworks.

Skills

Privacy law

Regulatory compliance

Contract negotiation

Cross-functional collaboration

Education

Juris Doctor degree

Job description

Be Here. Be Great. Working for a leader in the insurance industry means opportunity for you. Great American Insurance Group's member companies are subsidiaries of American Financial Group. We combine a small company culture where your ideas will be heard with big company expertise to help you succeed. With over 30 specialty and property and casualty operations, there are always opportunities here to learn and grow. At Great American, we value and recognize the benefits derived when people with different backgrounds and experiences work together to achieve business results. Our goal is to create a workplace where all employees feel included, empowered, and enabled to perform at their best.

This position is not eligible for employment visa sponsorship. Applicants must be authorized to work in the United States without the need for current or future sponsorship.

Great American’s culture is built on connection, shared learning, and strong relationships. To support this, employees in this role are expected to be on-site four days a week, with the flexibility to work one day remotely. Core in‑office days are Tuesday–Thursday, with the fourth day determined by business needs.

The Company is seeking a practical, collaborative Privacy Attorney to join its legal and compliance team and support a broad portfolio of privacy, data protection, cybersecurity, emerging technology/AI, and regulatory matters. The attorney will partner with business, technology, information security, compliance, procurement, and legal stakeholders across a complex insurance organization to translate evolving legal requirements into clear, defensible, and operationally workable solutions and support the organization’s privacy program. This role is well suited for an attorney with four to five years of relevant experience, who has a background in privacy and data protection frameworks and is ready to take on meaningful responsibility in an in‑house environment.

Essential Job Functions and Responsibilities

• Support the development, implementation, and ongoing maturation of the Company’s privacy program, including policies, procedures, training, governance, and third‑party contracting.
• Support privacy and security incident response, including investigation, remediation, documentation, and individual and regulator notifications under applicable laws.
• Draft, review, and negotiate privacy and data protection terms in commercial agreements, including data processing agreements, business associate agreements, and artificial intelligence provisions.
• Support compliance with privacy and data security laws, such as the NYDFS Part 500, GLBA and related state insurance laws and regulations, CCPA/CPRA, HIPAA, GDPR, and other applicable regulatory frameworks.
• Monitor legal and regulatory developments and translate them into practical recommendations, policies, controls, training, and implementation plans.
• Develop trusted relationships with internal clients and deliver responsive, business‑oriented legal guidance and workable compliance frameworks.

Required Qualifications

• Juris Doctor degree from an accredited law school.
• Active license and good standing in at least one U.S. jurisdiction.
• Generally, four to five years of relevant legal experience in privacy, health information, cybersecurity, technology, or related regulatory practice.
• Experience with HIPAA a plus.

Preferred Qualifications

• Experience in a law firm, advising on a variety of privacy, cybersecurity, and emerging technology matters.
• Experience with insurance or financial services regulations.
• Experience supporting privacy or security incident response and breach-notification analyses.
• Privacy certification, such as CIPP/US, or a comparable credential.

Attributes for Success

• Practical, curious, and comfortable learning complex business operations and technologies.
• Collaborative, team oriented, and able to build credibility with legal, technical, operational, and executive stakeholders.
• Clear and concise in communicating complex legal requirements to non‑legal audiences.
• Organized, responsive, and capable of advancing work independently while knowing when to escape.
• Committed to high-quality work, sound judgment, and continuous development in an evolving area of law.

Business Unit: Property & Casualty Legal Benefits:

• We offer competitive benefits packages for full-time and part-time employees*.
• Full-time employees have access to medical, dental, and vision coverage, wellness plans, parental leave, adoption assistance, and tuition reimbursement.
• Full-time and eligible part-time employees also enjoy Paid Time Off and paid holidays, a 401(k) plan with company match, an employee stock purchase plan, and commuter benefits.
• *Excludes seasonal employees and interns.
• Compensation varies by role, level, and location and is influenced by skills, experience, and business needs.

Great American Insurance Group understands the importance of choosing a financially strong company. We are an organization built for the long term and are committed to giving you that strength. For nearly 150 years, Americans have trusted us to protect them. Our innovative insurance solutions and specialization serves niche marketplaces that we know well. This expertise gives us a successful foundation that spans generations. You never know where a career in insurance will take you. Whether you are starting your career or are looking for a company to grow your experience, at Great American Insurance Group, you can join our more than 8,500 employees to “Be Here. Be GREAT!”

Why can you trust Great American Insurance Group?

For nearly 150 years, Americans have trusted us to protect them. Our innovative insurance solutions and specialization serves niche marketplaces that we know well. This expertise gives us a successful foundation that spans generations.

You never know where a career in insurance will take you. Whether you are starting your career or are looking for a company to grow your experience, at Great American Insurance Group, you can join our more than 8,500 employees to “Be Here. Be GREAT!”