Senior Privacy & Data Security Counsel

Cardinal Health; Pierre (SD); On-site; USD 124,000 - 176,000; Full time

Benefits offered by this job

Medical coverage

Dental and vision coverage

Paid time off

401k savings plan

HSA

Paid parental leave

Work-life resources

Job summary

Cardinal Health is seeking an experienced Privacy and Data Security Leader to provide strategic counsel on privacy, data protection and regulatory compliance for the enterprise.

The role partners with IT, legal, and business teams to manage privacy programs, incident response and training while navigating U.S. and international laws. A JD and bar license are required, with CIPP US preferred.

Qualifications

• 8-12 years of privacy and security experience.
• Juris Doctorate and bar license.
• Extensive knowledge of U.S. privacy and cybersecurity laws incl HIPAA.
• GDPR knowledge preferred.
• Strong relationship-building and collaboration skills.
• CIPP (US) certification preferred.

Responsibilities

• Advise on privacy issues with data protection, retention, use, security and breaches.
• Review and negotiate privacy-related agreements (DPA, PIA, BAA).
• Advise on incident response and data breach reporting processes.
• Collaborate with IT Security to align privacy and security programs.
• Guide cross-functional teams on privacy requirements for projects.
• Assist with regulatory inquiries and investigations related to privacy and data security.
• Review policies to ensure privacy compliance.
• Advise on privacy training program design.
• Stay updated on privacy developments at state, federal and international levels.
• Support acquisitions, divestitures, and joint ventures related to privacy.

Skills

Privacy law

Data security

Regulatory compliance

Contract negotiation

Leadership

Education

Juris Doctorate (JD)

Bachelor’s degree or equivalent

State bar license (OH or other)

CIPP (US) certification preferred

Job description

Cardinal Health is seeking an experienced Privacy and Data Security Leader to provide strategic counsel on privacy, data protection and regulatory compliance for the enterprise.

The role partners with IT, legal, and business teams to manage privacy programs, incident response and training while navigating U.S. and international laws. A JD and bar license are required, with CIPP US preferred.