Senior Privacy & Cybersecurity Counsel

Cardinal Health; Honolulu (HI); On-site; USD 124,000 - 176,000; Full time

Benefits offered by this job

Medical, dental and vision

Paid time off

HSA

401k savings plan

myFlexPay

FSAs

Disability coverage

Work-Life resources

Paid parental leave

Healthy lifestyle programs

Job summary

Cardinal Health seeks a senior privacy and data security attorney to advise leadership on privacy issues, data protection, and compliance. You will review privacy agreements, guide incident response, and coordinate with IT security to ensure program alignment across the enterprise.

Experience with HIPAA, state privacy laws, and GDPR is preferred. The role requires JD and active bar license, 8–12 years of relevant experience, and the ability to navigate complex regulatory environments.

Qualifications

• 8–12 years of experience, preferred
• Juris Doctorate degree required
• Bar license to practice law in Ohio or another state
• Extensive knowledge of U.S. privacy and cybersecurity laws
• GDPR knowledge preferred
• Strong relationship-building and collaboration skills
• Ability to assess risks quickly and provide practical legal advice
• CIPP US certification preferred

Responsibilities

• Advise on privacy issues, data protection, data retention and data breaches
• Review and negotiate privacy-related agreements like data processing and business associate agreements
• Guide incident response and breach reporting with the VP of Privacy
• Coordinate with IT Security to align privacy and security programs
• Translate privacy requirements for cross-functional teams on complex projects
• Manage regulatory inquiries, investigations or actions related to privacy and data security
• Review policies to ensure privacy law compliance
• Help design and provision privacy training programs
• Stay updated on privacy developments at various levels
• Support acquisitions, divestitures, and joint ventures related to privacy

Skills

Privacy compliance

Data protection

Data security

Breach response

Regulatory knowledge

Policy guidance

Incident management

Stakeholder collaboration

CIPP US

Education

Juris Doctorate

Bar license (OH or other)

Bachelor's degree in related field

8-12 years experience

Job description

Cardinal Health seeks a senior privacy and data security attorney to advise leadership on privacy issues, data protection, and compliance. You will review privacy agreements, guide incident response, and coordinate with IT security to ensure program alignment across the enterprise.

Experience with HIPAA, state privacy laws, and GDPR is preferred. The role requires JD and active bar license, 8–12 years of relevant experience, and the ability to navigate complex regulatory environments.