Senior Counsel - Data Governance, Privacy, and Cybersecurity

Cencora; New York (NY); On-site; USD 121,000 - 187,000; Full time

Job summary

Join a forward-thinking company as an attorney specializing in data governance, privacy, and cybersecurity. This role offers the opportunity to provide strategic legal advice on complex regulatory issues while collaborating with diverse teams. You'll be instrumental in shaping compliance strategies and managing legal risks associated with emerging technologies. With a focus on innovation and a commitment to creating healthier futures, this position is perfect for those looking to make a significant impact in the legal landscape of health and technology. Embrace the chance to work in a dynamic environment that values your expertise and supports your professional growth.

Benefits

Health Care

Family Support

Professional Development

Mentorship

Employee Resource Groups

Volunteer Activities

Qualifications

• 5-7 years of legal experience in privacy, data governance, and cybersecurity.
• Graduate of an accredited law school and in good standing with a US state bar.

Responsibilities

• Advise on legal questions in data privacy, cybersecurity, and AI.
• Draft and negotiate contracts, including HIPAA-related agreements.
• Manage multiple projects efficiently, addressing high-risk needs.

Skills

Data Governance

Privacy Law

Cybersecurity

Artificial Intelligence Law

HIPAA Compliance

Project Management

Negotiation Skills

Risk Management

Education

Juris Doctor (JD)

Job description

Our team members are at the heart of everything we do. At Cencora, we are united in our responsibility to create healthier futures, and every person here is essential to us being able to deliver on that purpose. If you want to make a difference at the center of health, come join our innovative company and help us improve the lives of people and animals everywhere. Apply today!

Job Details

Position Summary:

Cencora seeks an attorney with significant experience in data governance, privacy, cybersecurity, and emerging artificial intelligence issues to provide strategic legal advice on data risk management and innovation priorities. This role reports to the Assistant General Counsel - Data Governance, Privacy, and Cybersecurity and collaborates with legal, business, and functional teams across the enterprise.

This position requires expertise in US, Canada, and LA-relevant privacy, cybersecurity, and AI laws, regulations, and guidance. Routine analysis and legal advice regarding HIPAA and healthcare privacy laws are also expected.

The successful candidate will have strong analytical skills, provide pragmatic and business-oriented legal services, and possess excellent prioritization and project management skills. The role involves strategic insights to compliance partners and governance development for emerging data and technology law areas.

Primary Duties and Responsibilities:

1. Advise on complex legal, regulatory, and policy questions in data privacy, cybersecurity, and AI, including laws like HIPAA, state privacy laws, Canadian provincial laws, CMMC, NIST frameworks, ISO 27001, HITRUST, and state/local AI laws.
2. Draft, review, and negotiate contracts, including healthcare and HIPAA-related agreements, and develop templates and playbooks for privacy, cyber, and AI law issues.
3. Assess and mitigate harms from privacy and cybersecurity incidents through communication, issue escalation, and stakeholder partnership.
4. Review technology proposals involving privacy, cyber, and AI risks, providing pragmatic solutions that incorporate privacy and security by design.
5. Demonstrate strong decision-making and communication skills during incidents or high-risk proposals requiring escalation.
6. Manage multiple projects efficiently, ensuring high-value and high-risk needs are addressed strategically.

Experience and Education Requirements

Minimum 5-7 years of legal experience in privacy, data governance, and cybersecurity, preferably with in-house and cross-functional experience in multinational companies. Healthcare legal experience is a plus. Must be a graduate of an accredited law school and admitted to and in good standing with a US state bar. The role is akin to a senior associate in a law firm, capable of sophisticated counseling with limited supervision.

Minimum Skills, Knowledge, and Abilities:

• Knowledge of privacy, cybersecurity, AI laws across NA and LA, including healthcare laws like HIPAA.
• Ability to synthesize legal themes across jurisdictions for risk management counseling.
• Experience managing outside counsel and liaising with legal and technical experts.
• Ability to understand business models and technology trends, aligning legal requirements with business strategy.
• Experience advising senior management with clear risk analysis and solutions.
• Strong soft skills for incident management and risk escalation, projecting calm and confidence.
• Experience working with compliance teams and defining operational targets.
• Privacy, AI, or information security certifications (preferred).
• Negotiation, prioritization, multitasking, and client relationship skills.

What Cencora Offers

We provide competitive compensation, benefits, and resources supporting an inclusive culture and wellness. Benefits include health care, family support, training, professional development, mentorship, employee resource groups, volunteer activities, and more. Details at https://www.virtualfairhub.com/cencora.

Salary Range*

$121,000 - 186,230 (varies by location). Range reflects national averages; actual may be up to 10% lower or 12% higher depending on the locale.

Equal Employment Opportunity

Cencora is committed to equal opportunity employment and non-discrimination. We provide reasonable accommodations for individuals with disabilities during the employment process. To request accommodations, contact 888.692.2272 or [e-mail].

Affiliated Companies: AmerisourceBergen Services Corporation