Senior Counsel, Privacy & Data Security Strategy

Cardinal Health; United States; On-site; USD 124,000 - 176,000; Full time

Benefits offered by this job

Medical, dental and vision coverage

Paid time off plan

Health savings account (HSA)

401k savings plan

Access to wages before pay day with my

Flexible spending accounts (FSAs)

Short- and long-term disability

Work-Life resources

Paid parental leave

Healthy lifestyle programs

Job summary

Cardinal Health is seeking an experienced privacy counsel to advise business leaders on data protection, data security, and regulatory compliance. You will review privacy agreements, guide incident response, and align privacy with IT security.

Responsibilities include cross-functional training, handling regulatory inquiries, supporting M&A privacy due diligence, and maintaining legislative updates. A JD and US bar license are required; 8–12 years of experience preferred.

Qualifications

• 8-12 years of privacy and cybersecurity experience.
• Juris Doctorate and bar license.
• Knowledge of U.S. and international privacy laws incl. GDPR.
• CIPP (US) certification preferred.
• Strong communication and collaboration skills.

Responsibilities

• Advise business leaders on privacy, data protection, and security.
• Review and negotiate privacy-related agreements (DPAs, BAAs, etc.).
• Lead incident response and data breach processes.
• Coordinate with IT Security to align privacy and security programs.
• Design and deliver privacy training; monitor regulatory developments.
• Support inquiries, investigations, and regulatory actions related to privacy.
• Assist with privacy aspects of M&A, divestitures, and joint ventures.

Skills

Privacy expertise

Data privacy regulatory knowledge

Incident response

Cross-functional collaboration

Regulatory compliance

Education

Juris Doctorate

Bar license (US or Ohio)

Job description

Cardinal Health is seeking an experienced privacy counsel to advise business leaders on data protection, data security, and regulatory compliance. You will review privacy agreements, guide incident response, and align privacy with IT security.

Responsibilities include cross-functional training, handling regulatory inquiries, supporting M&A privacy due diligence, and maintaining legislative updates. A JD and US bar license are required; 8–12 years of experience preferred.