Senior Counsel, Privacy and Compliance

In This Role, You Will

Data Privacy
- Develop and maintain infrastructure to comply with varying data privacy regulations in Europe and new countries for clinical trial plans
- Review and negotiate data protection terms, DPAs, vendor/customer agreements, security addenda, and other contracts from a privacy standpoint
- Monitor and advise on privacy/compliance developments, including U.S. state privacy laws, GDPR, CCPA/CPRA, sector rules, and emerging AI/cybersecurity requirements
- Support incident response, data subject rights requests, privacy impact assessments, transfer impact assessments, and regulatory inquiries
- Support vendor onboarding and maintenance for vendors processing personal data
- Maintain the company’s Record of Processing Activity
- Counsel on privacy-by-design reviews, data mapping, vendor onboarding, AI/data use cases, and geographic expansions
- Draft policies and perform trainings to support data protection compliance

Compliance
- Assist Legal in drafting and implementing corporate compliance policies, training, and follow-up
- Partner with HR and other functions to identify policy/guidance needs
- Collaborate to create a “right size” compliance function that enables growth while protecting against risk

The Experience You’ll Need
- At least 4 years of data privacy counseling experience in biotech/pharma (law firm or preferably in-house)
- Strong working knowledge of U.S. state privacy laws, GDPR, CCPA/CPRA
- Experience reviewing/negotiating privacy, security, and data protection provisions in commercial agreements
- Clear, practical advice in a fast-moving environment; strong judgment and attention to detail; ability to manage multiple projects
- Excellent written and verbal communication
- Preferred: IPP/US, CIPP/E, CIPM (or similar); experience building/scaling privacy programs in-house
- Admitted to practice in at least one state and eligible to practice law in Utah as in-house counsel