Data Privacy Officer, Counsel

Main Responsibilities:
- Serve as internal Privacy Counsel and Privacy Officer for the US market.
- Apply expertise in data protection, information security, breach notification, and data privacy policies/procedures in compliance with GDPR, HIPAA, and US state privacy laws.
- Conduct data privacy impact assessments for in-scope projects/products.
- Manage privacy and breach requirements, including investigation, reporting, and remediation.
- Liaise with regulatory bodies and internal stakeholders on privacy/compliance issues.
- Train and support business unit teams on data privacy best practices and implementation of new state laws.
- Maintain accurate documentation and records of data processing activities for audit purposes.

Qualifications:
- JD from an accredited law school (data privacy focus preferred) and US license to practice law.
- In-depth knowledge of US state/federal privacy laws (e.g., CCPA, HIPAA) and breach notification regulations; familiarity with AI regulations.
- Analytical ability for legal/regulatory/policy review, including proposed privacy regulations.
- Previous privacy/AI/breach notification/cybersecurity law experience and data loss prevention experience (law firm).
- Healthcare experience counseling product management in pharma/biotech.
- Relevant privacy certification (e.g., CIPP-US).
- 5+ years legal experience; strong cross-functional collaboration.
- Excellent written/verbal communication; proficiency with Word, PowerPoint, and standard software.

Preferred/Desirable:
- Counsel pharma/biotech on FDA/government healthcare matters; counsel large enterprises on privacy compliance; privacy compliance software experience.
- Product/project management experience; French proficiency; AI law knowledge.

Benefits (explicit): healthcare, prevention/wellness programs, and at least 14 weeks’ gender-neutral parental leave.