Privacy Counsel

Great American Insurance Group; Cincinnati (OH); Hybrid; USD 120,000 - 160,000; Full time

Benefits offered by this job

Medical, dental, and vision coverage

Wellness plans

Parental leave

Tuition reimbursement

Paid time off and holidays

401(k) with company match

Employee stock purchase plan

Commuter benefits

Job summary

Great American Insurance Group seeks a practical Privacy Attorney to join its legal and compliance team. You will partner with business, technology, information security, compliance, and procurement to translate evolving privacy requirements into actionable, defensible solutions. The role emphasizes on‑site collaboration with a remote day as needed.

Ideal candidates have 4–5 years of privacy/regulatory experience, a JD, and an active U.S. license, with HIPAA experience considered a plus.

Qualifications

• JD from an accredited law school.
• Active license in at least one U.S. jurisdiction.
• 4–5 years of privacy, health information, cybersecurity, technology, or related regulatory practice; HIPAA a plus.

Responsibilities

• Support the privacy program's development, implementation, and maturation, including policies, procedures, training, governance, and third‑party contracting.
• Assist privacy and security incident response, including investigation, remediation, documentation, and regulator notifications.
• Draft, review, and negotiate privacy/data protection terms in commercial agreements (DPA, BAAs, AI provisions).
• Support compliance with privacy/data security laws (NYDFS Part 500, GLBA, CCPA/CPRA, HIPAA, GDPR, etc.).
• Monitor regulatory developments and translate them into practical recommendations, controls, and training.
• Develop relationships with internal clients and provide actionable, business‑oriented legal guidance.

Skills

Privacy

Data protection

Regulatory compliance

Stakeholder collaboration

Education

Juris Doctor (JD)

Job description

Be Here. Be Great. Working for a leader in the insurance industry means opportunity for you. Great American Insurance Group’s member companies are subsidiaries of American Financial Group. We combine a “small company” culture where your ideas will be heard with “big company” expertise to help you succeed. With over 30 specialty and property and casualty operations, there are always opportunities here to learn and grow.

At Great American, we value and recognize the benefits derived when people with different backgrounds and experiences work together to achieve business results. Our goal is to create a workplace where all employees feel included, empowered, and enabled to perform at their best.

This position is not eligible for employment visa sponsorship. Applicants must be authorized to work in the United States without the need for current or future sponsorship.

Great American’s culture is built on connection, shared learning, and strong relationships. To support this, employees in this role are expected to be on‑site four days a week, with the flexibility to work one day remotely. Core in‑office days are Tuesday–Thursday, with the fourth day determined by business needs.

The Company is seeking a practical, collaborative Privacy Attorney to join its legal and compliance team and support a broad portfolio of privacy, data protection, cybersecurity, emerging technology/AI, and regulatory matters. The attorney will partner with business, technology, information security, compliance, procurement, and legal stakeholders across a complex insurance organization to translate evolving legal requirements into clear, defensible, and operationally workable solutions and support the organization’s privacy program. This role is well suited for an attorney with four to five years of relevant experience, who has a background in privacy and data protection frameworks and is ready to take on meaningful responsibility in an in‑house environment.

Essential Job Functions and Responsibilities

• Support the development, implementation, and ongoing maturation of the Company’s privacy program, including policies, procedures, training, governance, and third‑party contracting.

• Support privacy and security incident response, including investigation, remediation, documentation, and individual and regulator notifications under applicable laws.

• Draft, review, and negotiate privacy and data protection terms in commercial agreements, including data processing agreements, business associate agreements, and artificial intelligence provisions.

• Support compliance with privacy and data security laws, such as the NYDFS Part 500, GLBA and related state insurance laws and regulations, CCPA/CPRA, HIPAA, GDPR, and other applicable regulatory frameworks.

• Monitor legal and regulatory developments and translate them into practical recommendations, policies, controls, training, and implementation plans.

• Develop trusted relationships with internal clients and deliver responsive, business‑oriented legal guidance and workable compliance frameworks.

Required Qualifications

• Juris Doctor degree from an accredited law school.
• Active license and good standing in at least one U.S. jurisdiction.
• Generally, four to five years of relevant legal experience in privacy, health information, cybersecurity, technology, or related regulatory practice. Experience with HIPAA a plus.

Preferred Qualifications

• Experience in a law firm, advising on a variety of privacy, cybersecurity, and emerging technology matters.
• Experience with insurance or financial services regulations.
• Experience supporting privacy or security incident response and breach‑notification analyses.
• Privacy certification, such as CIPP/US, or a comparable credential.

Attributes for Success

• Practical, curious, and comfortable learning complex business operations and technologies.
• Collaborative, team oriented, and able to build credibility with legal, technical, operational, and executive stakeholders.
• Clear and concise in communicating complex legal requirements to non‑legal audiences.
• Organized, responsive, and capable of advancing work independently while knowing when to elevate.
• Committed to high‑quality work, sound judgment, and continuous development in an evolving area of law.

Business Unit:

Property & Casualty Legal

Benefits:

We offer competitive benefits packages for full‑time and part‑time employees*. Full‑time employees have access to medical, dental, and vision coverage, wellness plans, parental leave, adoption assistance, and tuition reimbursement. Full‑time and eligible part‑time employees also enjoy Paid Time Off and paid holidays, a 401(k) plan with company match, an employee stock purchase plan, and commuter benefits.

Compensation varies by role, level, and location and is influenced by skills, experience, and business needs. Your recruiter will provide details about benefits and specific compensation ranges during the hiring process. Learn more at http://www.gaig.com/careers.

*Excludes seasonal employees and interns.