Privacy & Cybersecurity, Sr. Counsel

Cardinal Health; Carson City (NV); On-site; USD 124,000 - 176,000; Full time

Benefits offered by this job

Medical, dental and vision coverage

Paid time off plan

401k savings plan

HSA

FSAs

Disability coverage

Work-Life resources

Paid parental leave

Healthy lifestyle programs

Job summary

Cardinal Health seeks a senior privacy & data security leader to advise on complex privacy matters, collaborate with IT and business teams, and guide regulatory inquiries. You will shape privacy practices, review contracts, and drive incident response, training, and policy compliance across the enterprise.

The role requires JD and bar licensure, extensive U.S. privacy knowledge (HIPAA, state laws) and strong cross-functional collaboration skills, with a focus on practical, business-friendly

Qualifications

• 8-12 years of experience, preferred
• Bachelor’s degree in related field, or equivalent work experience, preferred
• Juris Doctorate degree required
• License to practice law in Ohio or active bar license in another state
• Extensive knowledge of U.S. privacy and cybersecurity laws, regulations, and standards
• Knowledge of international privacy and data security laws, including GDPR, preferred
• Strong relationship-building and collaboration skills
• Solution and results oriented, with the ability to prioritize and deliver key initiatives
• Ability to assess legal, practical and business risks quickly and accurately in a fast-paced environment
• Be able to find practical and creative solutions and provide concise and business-focused legal advice
• Have excellent problem-solving, written and oral communication and interpersonal skills
• CIPP (US) certification preferred

Responsibilities

• Advise on data privacy and security issues for the business, including data protection, retention, usage, security and data breaches
• Review and negotiate data privacy agreements, data processing agreements and business associate agreements
• Advise on incident response and data breach reporting processes
• Collaborate with IT Security to align privacy and security programs
• Provide guidance to cross-functional teams on privacy requirements for complex projects
• Assist with regulatory inquiries, investigations or administrative actions related to privacy and data security
• Review policies to ensure compliance with privacy laws and regulations
• Advise on privacy training program design and delivery
• Stay updated on privacy legislation at state, federal and international levels
• Support acquisitions, divestitures and joint ventures as they relate to privacy matters

Skills

Privacy law

Data privacy

Regulatory compliance

Risk assessment

Communication skills

Cross-functional collaboration

Problem solving

Education

Bachelor’s degree

Juris Doctorate

Bar license

CIPP (US) certification

Job description

US-Nationwide-FIELD

Full time

20186262

What Legal Management contributes to Cardinal Health

Legal provides the company with strategic, proactive, practical and cost-effective legal advice and services in order to protect the organization's assets, operations and image. This function provides legal counsel related to commercial, corporate securities, intellectual property, labor and employment, and regulatory law, among other areas. This function also litigates all company legal matters, manages outside counsel and manages legal operations.

Legal Management provides strategic oversight, leadership and direction within the Legal function.

Responsibilities

• Serve as a functional expert working closely with and advising business leaders, commercial counsel, and other colleagues on privacy issues, including data protection, data retention, data usage, data security and data breaches

• Review and negotiation of data privacy agreements, data processing agreements, business associate agreements and other similar privacy-related provisions

• Advise on incident response and data breach reporting processes in coordination with the VP of Privacy

• Collaborate with IT Security teams to ensure alignment between IT security and privacy compliance programs

• Provide guidance, direction, and practical translation of privacy requirements to cross-functional teams on complex projects

• Assist with the management of legislative and regulatory inquiries, investigations or administrative actions related to privacy and data security

• Review policies and procedures to ensure compliance with applicable data privacy laws and regulations

• Advise on the design and provision of the privacy training program

• Remain up to date on legislative developments in Privacy at the state, federal and international level that may affect Cardinal Health

• Support acquisitions, divestitures, and joint ventures as they relate to privacy matters

What is expected of you and others at this level

• Manages department operations and supervises professional employees, front line supervisors and/or business support staff

• Participates in the development of policies and procedures to achieve specific goals

• Ensures employees operate within guidelines

• Decisions have a short-term impact on work processes, outcomes and customers

• Interacts with subordinates, peers, customers, and suppliers at various management levels; may interact with senior management

• Interactions normally involve resolution of issues related to operations and/or projects

• Gains consensus from various parties involved

• Standard business will be conducted during Eastern Standard Time

Qualifications

• 8-12 years of experience, preferred

• Bachelor’s degree in related field, or equivalent work experience, preferred

• Juris Doctorate degree required

• License to practice law in Ohio or active bar license in another state

• Extensive knowledge of U.S. privacy and cybersecurity laws, regulations, and standards, including HIPAA, state privacy laws (e.g., comprehensive state privacy laws, state breach notification, etc.), as well as consumer protection and employment-related privacy laws and regulations

• Knowledge of international privacy and data security laws, including GDPR, preferred

• Strong relationship-building and collaboration skills

• Solution and results oriented, with the ability to prioritize and deliver key initiatives

• Ability to assess legal, practical and business risks quickly and accurately in a fast-paced environment, and make sound judgments under tight deadlines

• Be able to find practical and creative solutions and provide concise and business-focused legal advice

• Have excellent problem-solving, written and oral communication and interpersonal skills; and

• CIPP (US) certification preferred

Anticipated salary range: $123,600 - $176,000

Bonus eligible: Yes

Benefits: Cardinal Health offers a wide variety of benefits and programs to support health and well-being.

• Medical, dental and vision coverage

• Paid time off plan

• Health savings account (HSA)

• 401k savings plan

• Access to wages before pay day with myFlexPay

• Flexible spending accounts (FSAs)

• Short- and long-term disability coverage

• Work-Life resources

• Paid parental leave

• Healthy lifestyle programs

The salary range listed is an estimate. Pay at Cardinal Health is determined by multiple factors including, but not limited to, a candidate’s geographical location, relevant education, experience and skills and an evaluation of internal pay equity.

Cardinal Health supports an inclusive workplace that values diversity of thought, experience and background. We celebrate the power of our differences to create better solutions for our customers by ensuring employees can be their authentic selves each day. Cardinal Health is an Equal Opportunity/Affirmative Action employer. All qualified applicants will receive consideration for employment without regard to race, religion, color, national origin, ancestry, age, physical or mental disability, sex, sexual orientation, gender identity/expression, pregnancy, veteran status, marital status, creed, status with regard to public assistance, genetic status or any other status protected by federal, state or local law.

To read and review this privacy notice click here (https://www.cardinalhealth.com/content/dam/corp/email/documents/corp/cardinal-health-online-application-privacy-policy.pdf)

Headquartered in Dublin, Ohio, Cardinal Health, Inc. (NYSE: CAH) is a distributor of pharmaceuticals, a global manufacturer and distributor of medical and laboratory products, and a provider of performance and data solutions for healthcare facilities.

We are a crucial link between the clinical and operational sides of healthcare, delivering end‑to‑end solutions and data‑driving insights that advance healthcare and improve lives every day. With deep partnerships, diverse perspectives and innovative digital solutions, we build connections across the continuum of care.

With more than 50 years of experience, we seize the opportunity to address healthcare's most complicated challenges — now, and in the future.

View Cardinal Health on YouTube (http://youtube.com/user/CardinalHealth)