Remote Privacy Counsel for Health Data Compliance

EVERSANA; Chicago (IL); On-site; USD 93,163 - 113,866; Full time

Job summary

EVERSANA is seeking a Privacy Counsel to join our in-house legal team. Reporting to the Privacy Office, you will shape how we navigate global privacy laws, protect health and research data, and design privacy-first processes across products and services.

You will advise internal teams on CCPA/CPRA, HIPAA, GDPR, draft privacy agreements, lead DPIAs/PIAs, and help manage data incidents while aligning with our culture of diversity and inclusion.

Qualifications

• JD from an accredited law school; active US bar membership.
• 2–4 years of experience in data privacy, cybersecurity, tech law, or healthcare regulatory matters.
• Operational experience in data privacy programs and real-world implementations.
• Proven ability to manage data privacy incidents, including risk assessment and coordination.
• Strong knowledge of GDPR, CCPA/CPRA, HIPAA and similar laws.
• Experience drafting privacy provisions in commercial agreements.
• Healthcare/privacy compliance experience preferred.
• Familiarity with privacy tech tools (OneTrust/TrustArc/Osano).
• Data privacy certifications such as CIPM or CIPP/E are a plus.
• Strong communication and ability to translate legal concepts for stakeholders.
• Proactive, solutions-oriented; capable of balancing risk with business goals; remote-ready.

Responsibilities

• Advise internal teams on U.S. privacy laws and international frameworks with health data focus.
• Draft, review, and negotiate privacy-related agreements (DPA, vendor, BAA).
• Develop privacy policies, notices, consent management strategies, and governance.
• Guide incident response, breach notifications, risk assessments, and reporting.
• Conduct PIAs and DPIAs for new products, services, systems, and data uses.
• Monitor regulatory developments and advise on privacy trends.
• Collaborate with IT, security, compliance, marketing, product, and research teams.
• Provide practical, risk-based legal guidance on collection, use, retention, and de-identification.

Skills

Juris Doctor (JD)

Bar admission

Data privacy program

Privacy incident

GDPR/CCPA/HIPAA knowledge

Contract drafting

Healthcare regulatory matters

Privacy tools

In-house experience

Analytical skills

Education

Juris Doctor (JD)

Tools

OneTrust TrustArc

Osano

Job description

EVERSANA is seeking a Privacy Counsel to join our in-house legal team. Reporting to the Privacy Office, you will shape how we navigate global privacy laws, protect health and research data, and design privacy-first processes across products and services.

You will advise internal teams on CCPA/CPRA, HIPAA, GDPR, draft privacy agreements, lead DPIAs/PIAs, and help manage data incidents while aligning with our culture of diversity and inclusion.