Senior Privacy & Cybersecurity Counsel — Strategy & Compliance

Cardinal Health; Phoenix (AZ); Remote; USD 124,000 - 176,000; Full time

Benefits offered by this job

Medical, dental and vision coverage

Paid time off

Health savings account (HSA)

401k savings plan

Access to wages before pay day (myFlex

Flexible spending accounts (FSAs)

Disability coverage

Work-Life resources

Paid parental leave

Healthy lifestyle programs

Job summary

Cardinal Health is seeking an experienced privacy attorney to join the Legal Management team. You will advise on privacy and data security matters, review data processing agreements, and guide incident response and regulatory reporting across the enterprise.

The role requires a JD with 8–12 years of experience, strong knowledge of HIPAA and privacy laws, and the ability to collaborate with IT Security and business leaders to implement compliant programs.

Qualifications

• 8-12 years of experience in law or privacy field
• Juris Doctorate degree required
• License to practice law in Ohio or active bar in another state
• Extensive knowledge of U.S. privacy and cybersecurity laws including HIPAA
• Knowledge of GDPR is preferred
• Strong communication and collaboration skills
• CIPP US certification preferred

Responsibilities

• Advise on privacy and data security issues for Cardinal Health across business lines
• Review and negotiate data privacy agreements and related documents
• Guide incident response and data breach reporting processes
• Collaborate with IT Security to align privacy and security programs
• Provide practical privacy guidance to cross-functional teams on complex projects
• Assist with regulatory inquiries, investigations or actions related to privacy
• Review policies to ensure compliance with privacy laws and regulations
• Contribute to privacy training program design and delivery
• Stay up to date on privacy developments at state, federal and international levels
• Support mergers, acquisitions, divestitures, and joint ventures as they relate to privacy

Job description

Cardinal Health is seeking an experienced privacy attorney to join the Legal Management team. You will advise on privacy and data security matters, review data processing agreements, and guide incident response and regulatory reporting across the enterprise.

The role requires a JD with 8–12 years of experience, strong knowledge of HIPAA and privacy laws, and the ability to collaborate with IT Security and business leaders to implement compliant programs.