Senior Privacy & Data Security Counsel

Cardinal Health; Northern (KY); Hybrid; USD 124,000 - 176,000; Full time

Benefits offered by this job

Medical coverage

Dental coverage

Vision coverage

Paid time off

Health Savings Account

401k plan

MyFlexPay

FSAs

Disability coverage

Work-Life resources

Parental leave

Wellness programs

Job summary

Cardinal Health seeks an experienced privacy counsel to advise on data privacy, security and regulatory matters across the enterprise. You will translate complex privacy requirements into actionable programs, policies and controls in collaboration with IT, security and business teams.

The role requires 8–12 years of privacy experience, a JD, and bar admission; knowledge of HIPAA and US privacy laws is essential, with CIPP-US preferred.

Qualifications

• Juris Doctorate degree required.
• License to practice law in Ohio or active bar license in another state.
• 8–12 years of privacy and cybersecurity experience.
• Knowledge of US privacy laws incl. HIPAA and state/federal regs.
• CIPP-US certification preferred.

Responsibilities

• Advise on privacy, data protection, and security programs for the enterprise.
• Review data processing agreements and data breach reporting processes.
• Coordinate incident response with IT security and privacy teams.
• Support regulatory inquiries, investigations and legislative actions.
• Assist with transactions, acquisitions, and joint ventures related to privacy.

Skills

Privacy expertise

Data security

Regulatory compliance

Legal advisement

Risk assessment

Cross-functional work

Communication skills

Education

Juris Doctorate

State bar license

Job description

Cardinal Health seeks an experienced privacy counsel to advise on data privacy, security and regulatory matters across the enterprise. You will translate complex privacy requirements into actionable programs, policies and controls in collaboration with IT, security and business teams.

The role requires 8–12 years of privacy experience, a JD, and bar admission; knowledge of HIPAA and US privacy laws is essential, with CIPP-US preferred.