In-House Privacy Counsel — Data Protection & Compliance

Great American Insurance Group; Cincinnati (OH); Hybrid; USD 120,000 - 180,000; Full time

Benefits offered by this job

Medical insurance

Dental insurance

Vision insurance

Wellness program

Parental leave

Adoption assistance

Tuition reimbursement

Paid Time Off

Paid holidays

401(k) with company match

Employee stock purchase plan

Commuter benefits

Job summary

Great American Insurance Group is seeking a Privacy Attorney to join its in-house legal team in Cincinnati. The role focuses on privacy, data protection, cybersecurity, and regulatory matters across a broad insurance portfolio.

On-site four days a week with one remote day, you will translate evolving requirements into workable, defensible solutions Ideal candidates will have 4–5 years of privacy experience, an active U.S. law license, and a JD from an accredited school.

Qualifications

• JD from an accredited law school.
• Active license and good standing in at least one U.S. jurisdiction.
• 4–5 years of privacy, health information, cybersecurity or related regulatory experience.

Responsibilities

• Support development and maturation of the privacy program, including policies and training.
• Assist privacy and security incident response, investigations, and regulator notifications.
• Draft and negotiate privacy and data protection terms in agreements.
• Ensure compliance with NYDFS Part 500, GLBA, CCPA/CPRA, HIPAA, GDPR, and related laws.
• Monitor regulatory developments and translate into practical policies and controls.
• Build trusted relationships with internal clients and provide practical legal guidance.

Skills

Privacy law

Regulatory compliance

Legal drafting

Contract review

Education

Juris Doctor degree

Job description

Great American Insurance Group is seeking a Privacy Attorney to join its in-house legal team in Cincinnati. The role focuses on privacy, data protection, cybersecurity, and regulatory matters across a broad insurance portfolio.

On-site four days a week with one remote day, you will translate evolving requirements into workable, defensible solutions Ideal candidates will have 4–5 years of privacy experience, an active U.S. law license, and a JD from an accredited school.