Remote Privacy Counsel: Data Privacy & Compliance

Eversana; United States; On-site; USD 103,515 - 145,230; Full time

Job summary

EVERSANA is seeking a Privacy Counsel to join the in-house legal team, focusing on data privacy, cybersecurity, and healthcare regulatory matters. You will shape privacy programs, advise on compliance with HIPAA, GDPR, and CCPA/CPRA, and guide incident response across a remote-first environment.

You will draft and negotiate privacy provisions, PIAs, DPIAs, and data processing agreements, partnering with IT, security, and business teams to embed privacy by design into products and services.

Qualifications

• Juris Doctor (JD) from an accredited law school and active bar membership in at least one U.S. jurisdiction.
• 2-4 years of experience practicing law with a focus on data privacy, cybersecurity, technology law, or healthcare regulatory matters.
• Operational experience in data privacy programs and support of business operations.
• Proven ability to manage and respond to data privacy incidents, including risk assessment and coordination with cross-functional teams.
• Strong working knowledge of major privacy laws and regulatory frameworks (GDPR, CCPA/CPRA, HIPAA).
• Experience drafting and negotiating privacy-related contractual provisions in a commercial setting.
• Experience supporting privacy compliance in healthcare, health technology, life sciences, or health science services sectors.
• Familiarity with privacy technologies and data governance tools (OneTrust, TrustArc, Osano).
• Data privacy certifications such as CIPM, CIPP/E, or AIGP are a plus.

Responsibilities

• Advise internal business teams on compliance with U.S. federal and state privacy laws and international frameworks.
• Draft, review, and negotiate privacy-related agreements (DPA, vendor, BA, cross-border transfers).
• Develop and implement privacy policies, notices, and consent management strategies.
• Guide incident response and regulatory reporting.
• Conduct PIAs and DPIAs for new products and data uses.
• Monitor legislative developments and advise on privacy trends.
• Collaborate with IT, security, compliance, marketing, product and operations to embed privacy.
• Provide risk-based legal advice on collection, use, and de-identification of health data.
• Demonstrate commitment to diversity, equity, and inclusion in privacy leadership.

Skills

Privacy law

Regulatory compliance

Data privacy programs

Incident response management

Cross-functional collaboration

Contract negotiation

Privacy by design

HIPAA/GDPR familiarity

Education

Juris Doctor (JD)

Tools

OneTrust/TrustArc

Osano

Job description

EVERSANA is seeking a Privacy Counsel to join the in-house legal team, focusing on data privacy, cybersecurity, and healthcare regulatory matters. You will shape privacy programs, advise on compliance with HIPAA, GDPR, and CCPA/CPRA, and guide incident response across a remote-first environment.

You will draft and negotiate privacy provisions, PIAs, DPIAs, and data processing agreements, partnering with IT, security, and business teams to embed privacy by design into products and services.