Remote In-House Privacy Counsel — Health Data Compliance

EVERSANA; Chicago (IL); On-site; USD 104,000 - 145,000; Full time

Job summary

EVERSANA is seeking an in-house Privacy Counsel to join the Privacy Office and help shape how we protect sensitive health information and ensure compliance with evolving global privacy regulations.

You will advise cross‑functional teams, draft and negotiate privacy provisions, and lead DPIAs/PIAs for new products in a fast-paced, fully remote environment. 2–4 years of privacy experience in healthcare or life sciences is preferred.

Qualifications

• JD from an accredited law school.
• Active bar membership in at least one U.S. jurisdiction.
• 2–4 years of experience in data privacy, cybersecurity, technology law, or healthcare regulatory matters.
• Experience drafting and negotiating privacy provisions in a commercial setting.
• Operational privacy program experience and incident response coordination.

Responsibilities

• Advise internal teams on compliance with U.S. privacy laws (CCPA/CPRA, HIPAA, GLBA) and GDPR/UK GDPR.
• Draft, review, and negotiate privacy-related agreements and DPAs.
• Develop and implement privacy policies, notices, consent management, and internal governance.
• Guide incident response, breach notification, risk assessments, and regulatory reporting.
• Conduct PIAs/DPIAs for new products and data uses.
• Monitor privacy law developments and advise on trends and enforcement actions.
• Collaborate with IT, security, compliance, marketing, product, and operations to embed privacy in operations.

Skills

Privacy law knowledge

Legal research

Communication skills

Education

Juris Doctor (JD)

Active bar membership

Tools

OneTrust TrustArc

Osano

Job description

EVERSANA is seeking an in-house Privacy Counsel to join the Privacy Office and help shape how we protect sensitive health information and ensure compliance with evolving global privacy regulations.

You will advise cross‑functional teams, draft and negotiate privacy provisions, and lead DPIAs/PIAs for new products in a fast-paced, fully remote environment. 2–4 years of privacy experience in healthcare or life sciences is preferred.