Senior Counsel - Data Governance, Privacy, and Cybersecurity

AmerisourceBergen; United States; Remote; USD 121,000 - 187,000; Full time

Job summary

Join a forward-thinking company dedicated to creating healthier futures. This role seeks an experienced attorney skilled in data governance, privacy, and cybersecurity. You'll provide strategic legal advice while collaborating across teams globally. Your expertise will help navigate complex legal landscapes, ensuring compliance with US and international laws. If you're passionate about making a difference in health and technology, this position offers a unique opportunity to impact lives positively. Embrace the challenge and help shape the future in an innovative environment.

Benefits

Health Care

Family Support

Professional Development

Mentorship

Employee Resource Groups

Volunteer Activities

Qualifications

• 5-7 years of legal experience in privacy, data governance, and cybersecurity.
• Graduate of an accredited law school, admitted to a US state bar.

Responsibilities

• Advise on legal questions in data privacy, protection, and cybersecurity.
• Draft and negotiate contracts related to healthcare and AI.

Skills

Data Governance

Privacy Law

Cybersecurity

Artificial Intelligence Law

Analytical Skills

Project Management

Negotiation Skills

Communication Skills

Education

Juris Doctor (JD)

Tools

NIST Framework

ISO 27001

HITRUST

CIPP Certification

CIPM Certification

CISSP Certification

Job description

Our team members are at the heart of everything we do. At Cencora, we are united in our responsibility to create healthier futures, and every person here is essential to us being able to deliver on that purpose. If you want to make a difference at the center of health, come join our innovative company and help us improve the lives of people and animals everywhere. Apply today!

Job Details

Position Summary:

Cencora seeks an attorney with significant experience in data governance, privacy, cybersecurity, and emerging artificial intelligence issues to provide strategic legal advice on data risk management and innovation. Reporting to the Assistant General Counsel - Data Governance, Privacy, and Cybersecurity, this role collaborates across legal, business, and functional teams globally.

This position requires expertise in US, Canada, and LA privacy, cybersecurity, and AI laws, regulations, and guidance, including HIPAA and state healthcare privacy laws. The candidate should possess strong analytical skills and deliver pragmatic, business-oriented legal services in a fast-paced tech environment, with excellent prioritization and project management skills.

Primary Duties and Responsibilities:

1. Advise on complex legal, regulatory, and policy questions in data privacy, protection, cybersecurity, and AI, including laws like HIPAA, NIST frameworks, ISO 27001, HITRUST, and state/local AI laws.
2. Draft, review, negotiate contracts related to healthcare, privacy, cybersecurity, and AI, including creating templates and playbooks for efficient management.
3. Assess and mitigate harms from privacy and cybersecurity incidents through communication and partnership with stakeholders.
4. Review technology proposals involving privacy, cyber, and AI risks, providing pragmatic solutions with privacy and security by design principles.
5. Demonstrate strong decision-making and communication skills during incidents or high-risk proposals requiring escalation.
6. Manage multiple projects effectively, ensuring high-value and high-risk needs are addressed strategically.

Experience and Education Requirements

Minimum 5-7 years of legal experience focusing on privacy, data governance, and cybersecurity, preferably with in-house and multinational experience, and healthcare sector exposure. Must be a graduate of an accredited law school, admitted to and in good standing with a US state bar. The role is akin to a senior associate in a law firm, capable of sophisticated counseling with limited supervision.

Minimum Skills, Knowledge, and Ability Requirements:

• Familiarity with privacy, cybersecurity, AI laws across NA and LA, including cyber disclosures to regulators like the SEC. Healthcare laws such as HIPAA are a plus.
• Ability to communicate legal themes across jurisdictions for risk management in multi-country launches or investments.
• Experience managing outside counsel and liaising with legal and technical experts.
• Ability to understand and align legal requirements with evolving business models and technology trends.
• Experience advising senior management with clear risk analysis and mitigation strategies.
• Strong soft skills for incident management and risk escalation, projecting calm and confidence.
• Experience working with compliance teams and defining operational targets.
• Privacy, AI, or security certifications (e.g., CIPP, CIPM, CISSP) are preferred.
• Excellent negotiation, prioritization, multitasking, and client relationship skills.

What Cencora Offers

We provide comprehensive compensation, benefits, and resources supporting an inclusive culture and wellness. Benefits include health care, family support, training, professional development, mentorship, employee resource groups, volunteer activities, and more. Details at https://www.virtualfairhub.com/cencora.

Salary Range: $121,000 - $186,230 (varies by location, with possible adjustments in certain states).

Equal Employment Opportunity

Cencora is committed to equal opportunity employment and nondiscrimination. Reasonable accommodations are available for individuals with disabilities. Contact [e-mail] for accommodation requests.