Senior Counsel - Data Governance, Privacy and Cybersecurity

Cencora, Inc.; Pennsylvania; Hybrid; USD 119,000 - 187,000; Full time

Benefits offered by this job

Comprehensive benefits

Training & development

Mentorship programs

Volunteer activities

Job summary

Cencora, Inc. in the United States seeks a Corporate Counsel II to lead privacy, data governance, cybersecurity and AI matters for its MSO. You will advise on PHI handling, vendor agreements, and regulatory compliance across the retinal practices nationwide.

The role reports to the Assistant General Counsel and requires 4–8 years of health data law experience, a law degree and bar admission. You will partner with security, product and business teams to design compliant, secure MSO offerings and

Qualifications

• Minimum 4–8 years of experience as a lawyer with privacy/cybersecurity/data governance focus.
• Juris Doctor degree and admission to a U.S. state bar.
• Experience advising on HIPAA/HITECH and health data privacy regimes is preferred.

Responsibilities

• Advise MSO data governance, privacy, AI, and cybersecurity matters and MSO data flows.
• Counsel MSO on privacy, security, and AI requirements for new and existing MSO offerings.
• Draft, review, and negotiate MSO-facing privacy and security agreements (BAAs, DPAs, data sharing, vendor addenda).
• Collaborate with information security and technology teams on security controls and frameworks.
• Assist in incident response planning and regulatory communications.
• Support governance, audits, and regulatory inquiries related to privacy and cybersecurity.

Skills

Privacy law

Cybersecurity

Data governance

AI governance

Contract negotiation

Education

Juris Doctor (JD)

Bar admission in US

Tools

Microsoft Word

Excel

PowerPoint

Teams

SharePoint

Job description

Our team members are at the heart of everything we do. At Cencora, we are united in our responsibility to create healthier futures, and every person here is essential to us being able to deliver on that purpose. If you want to make a difference at the center of health, come join our innovative company and help us improve the lives of people and animals everywhere. Job Details

Cencora is seeking a Corporate Counsel II (Senior Counsel) with experience advising and providing strategic leadership in data governance, privacy, cybersecurity, and AI as they apply to our Managed Services Organization ("MSO"), which serves clinical practice groups in the retinal space across the United States. This role reports to the Assistant General Counsel, Privacy, Responsible Data, & Technology within Cencora’s legal team and serves as a key legal resource to MSO legal and business teams on the design, launch, and operation of MSO technology-based services, including the collection, use, sharing, and protection of sensitive health information and other regulated data.

Primary Duties and Responsibilities

• Serve as a key counsel for MSO data governance, privacy, AI, and cybersecurity matters, including advising on MSO data flows and operating models; the use and protection of PHI and other sensitive data; and compliance with applicable U.S. federal and state privacy and security requirements (e.g., HIPAA/HITECH and state consumer health privacy laws, as applicable).
• Counsel MSO business owners on privacy, security, and AI requirements for new and existing MSO offerings, including product counseling for MSO platforms, analytics, care/therapy services support, population health insights, and other data-enabled services.
• Draft, review, and negotiate MSO-facing privacy and security contractual terms, including BAAs, DPAs, data sharing agreements, service agreements, and vendor/partner security addenda; advise on third-party risk management, subcontractor flow-downs, and MSO client requirements.
• Partner with MSO information security and technology teams to support MSO security program needs (e.g., NIST-aligned controls, HITRUST/ISO considerations where required).
• Assist in MSO incident response preparedness and legal support; advise on breach assessment and notification obligations; and coordinate with privacy, security, compliance, communications professionals, and client teams on incident-related MSO client, patient, and/or regulatory communications.
• Support MSO governance and reporting, and assist in responses to MSO client audits, questionnaires, and regulatory inquiries relating to privacy and cybersecurity representations.
• Establish and maintain strong relationships and clear escalation paths with MSO stakeholders (clinical/medical, operations, product/engineering, security, compliance, commercial, and other legal and compliance colleagues) to drive consistent, scalable MSO approaches to data governance, privacy, and security risk management and to enable MSO data innovation goals.

Experience and Educational Requirements

The lawyer in this role is expected to have a minimum of 4-8 years of experience as a lawyer, combined with expertise in privacy, cybersecurity, and/or data governance. The attorney must have a law degree—i.e., be a graduate of an accredited law school and be admitted to a U.S. state bar. The lawyer in this role is comparable to a senior associate or expert counsel in health data law at a law firm. This professional can navigate novel legal arenas, complete sophisticated and nuanced legal analysis, and deliver clear implementation guidance with minimal supervision in a fast-paced, risk-prioritized manner. The lawyer in this role should also be able to work collaboratively in cross-functional settings to advance shared business and risk-management goals.

Minimum Skills, Knowledge and Ability Requirements

• Working familiarity with a variety of cybersecurity and privacy regulations and frameworks relevant to MSO operations, including HIPAA/HITECH, state privacy laws (including consumer health privacy laws, as applicable), SEC cybersecurity disclosure rules (as applicable), AI regulatory frameworks, and commonly used security standards (e.g., NIST CSF/800-53), as needed to counsel clients and business partners.
• Knowledgeable in healthcare business and industry models, typical practices and trends, and capable of quickly learning the competitive landscape.
• Strong decision-making capability and proficiency in communicating business-oriented yet legally compliant recommendations to business partners.
• Ability to solve both straightforward and complex problems and to take a new perspective on existing, but potentially inefficient, solutions.
• Experience in juggling multiple matters and effectively multi-tasking and prioritizing deliverables to ensure that work is completed in a timely and efficient manner.
• Willingness to embrace change and to shift priorities and focus, often with minimal advance warning/direction.
• Ability to communicate effectively, both orally and in writing.
• Robust collaboration skills and the ability to work smoothly with all levels of business and professional colleagues.
• Effective interpersonal, negotiation, presentation, and communication skills, as well as organizational savvy, creativity and legal trend-spotting skills.
• Demonstrated attention to detail and ability to learn nuances of new technologies or approach that impact the MSO and associated clinical space, particularly in the data insights arena.
• Proficiency in Microsoft Word, Excel, PowerPoint, Teams, Sharepoint and the AI capabilities associated with this suite of tools.

What Cencora Offers

We provide compensation, benefits, and resources that enable a highly inclusive culture and support our team members’ ability to live with purpose every day. In addition to traditional offerings like medical, dental, and vision care, we also provide a comprehensive suite of benefits that focus on the physical, emotional, financial, and social aspects of wellness. This encompasses support for working families, which may include backup dependent care, adoption assistance, infertility coverage, family building support, behavioral health solutions, paid parental leave, and paid caregiver leave. To encourage your personal growth, we also offer a variety of training programs, professional development resources, and opportunities to participate in mentorship programs, employee resource groups, volunteer activities and much more. For details, visit https://www.virtualfairhub.com/cencora

Salary

Full time Salary Range* $119,100 - 186,560 *This Salary Range reflects a National Average for this job. The actual range may vary based on your locale. Ranges in Colorado/California/Washington/New York/Hawaii/Vermont/Minnesota/Massachusetts/Illinois State-specific locations may be up to 10% lower than the minimum salary range, and 12% higher than the maximum salary range.

Equal Employment Opportunity

Cencora is committed to providing equal employment opportunity without regard to race, color, religion, sex, sexual orientation, gender identity, genetic information, national origin, age, disability, veteran status or membership in any other class protected by federal, state or local law. The company’s continued success depends on the full and effective utilization of qualified individuals. Therefore, harassment is prohibited and all matters related to recruiting, training, compensation, benefits, promotions and transfers comply with equal opportunity principles and are non-discriminatory. Cencora is committed to providing reasonable accommodations to individuals with disabilities during the employment process which are consistent with legal requirements. If you wish to request an accommodation while seeking employment, please call 888.692.2272 or email [e-mail]. We will make accommodation determinations on a request-by-request basis. Messages and emails regarding anything other than accommodations requests will not be returned.

Affiliated Companies

Affiliated Companies: AmerisourceBergen Services Corporation Cencora is a leading global pharmaceutical solutions company that is committed to improving the lives of people and animals everywhere. We connect manufacturers, providers, and patients to ensure that anyone can get the therapies they need, where and when they need them. We’re a purpose-driven organization, where all of our team members around the world are united in our responsibility to create healthier futures. We work together every day to help our partners bring their innovations to patients worldwide, creating unparalleled access and impact at the center of health.