Associate Senior Privacy Counsel, Data Governance & Cybersecurity
About the position
Experienced privacy attorney will support the Office of Privacy and Innovation Governance, reporting to the Chief Privacy Counsel. This role will counsel on matters related to privacy, cybersecurity, data use, and technology matters, and partner closely with our Evernorth business unit. This role requires expertise in HIPAA, state and federal privacy laws, data use regulations, and breach notification laws; seasoned judgment; diplomacy; exceptional communication skills; and a demonstrated ability to proactively identify and resolve issues.
Responsibilities
• Provide counsel related to advanced and cutting-edge data use and acquisition, as well as data mapping, classification, and related data management and governance.
• Manage complex legal issues and risk related to data analytics, AI, de-identification, and use of nascent and emergent technologies.
• Support the privacy, security, and data protection aspects of relationships and contracts with technology companies, pharmaceutical manufacturers, HIEs, EMRs, app developers, and data aggregators.
• Interpret and apply privacy and data protection law and contractual requirements to a wide variety of business initiatives, such as (i) the development of clinical programs for patients and plan members; (ii) communications to providers and patients; (iii) policy development; (iv) collaboration and data exchange between affiliated and outside entities; and (v) digital initiatives such as website, email, text, social media, mobile apps, etc.
• Negotiate privacy and data use provisions, consistent with the company’s strategy and goals.
• Collaborate with other attorneys in the Legal Department as a subject matter expert.
• Stay abreast of, and communicate clearly and succinctly to non-lawyers, changes to or developments in privacy and data protection laws and regulations and their impact on business operations.
• Apply sound business judgment to the provision of legal advice and continuously look for opportunities to improve service.
Requirements
• Juris Doctor required.
• 8+ years of healthcare regulatory or privacy/cybersecurity legal experience; in‑house experience in a large, matrixed healthcare organization strongly preferred.
• Deep expertise in HIPAA, state and federal privacy laws, data governance frameworks, data use regulations, and breach notification requirements.
• Proven ability to evaluate legal risk in complex technical environments, including analytics, AI, and emerging technologies.
• Strong negotiation skills and significant experience drafting/negotiating privacy and data-related contractual terms.
• Highly collaborative individual with the ability to influence others and build strong professional relationships.
• Consistent sound judgment and strong analytic abilities.
• Intellectual flexibility: adept at reassessing priorities to ensure that internal and external expectations are fulfilled.
• Strong ability to navigate through barriers to drive successful initiatives throughout the business.
• Hybrid role – 3 days in office preferred; remote may be considered for exceptional candidates
• If you will be working at home occasionally or permanently, the internet connection must be obtained through a cable broadband or fiber optic internet service provider with speeds of at least 10Mbps download/5Mbps upload.
Benefits
• For this position, we anticipate offering an annual salary of 157,100 - 261,800 USD / yearly, depending on relevant factors, including experience and geographic location.
• This role is also anticipated to be eligible to participate in an annual bonus and long term incentive plan.
• At The Cigna Group, you’ll enjoy a comprehensive range of benefits, with a focus on supporting your whole health.
• Starting on day one of your employment, you’ll be offered several health-related benefits including medical, vision, dental, and well-being and behavioral health programs.
• We also offer 401(k), company paid life insurance, tuition reimbursement, a minimum of 18 days of paid time off per year and paid holidays.
Apply tot his job
Apply To this Job
Experienced privacy attorney will support the Office of Privacy and Innovation Governance, reporting to the Chief Privacy Counsel. This role will counsel on matters related to privacy, cybersecurity, data use, and technology matters, and partner closely with our Evernorth business unit. This role requires expertise in HIPAA, state and federal privacy laws, data use regulations, and breach notification laws; seasoned judgment; diplomacy; exceptional communication skills; and a demonstrated ability to proactively identify and resolve issues.
Responsibilities
• Provide counsel related to advanced and cutting-edge data use and acquisition, as well as data mapping, classification, and related data management and governance.
• Manage complex legal issues and risk related to data analytics, AI, de-identification, and use of nascent and emergent technologies.
• Support the privacy, security, and data protection aspects of relationships and contracts with technology companies, pharmaceutical manufacturers, HIEs, EMRs, app developers, and data aggregators.
• Interpret and apply privacy and data protection law and contractual requirements to a wide variety of business initiatives, such as (i) the development of clinical programs for patients and plan members; (ii) communications to providers and patients; (iii) policy development; (iv) collaboration and data exchange between affiliated and outside entities; and (v) digital initiatives such as website, email, text, social media, mobile apps, etc.
• Negotiate privacy and data use provisions, consistent with the company’s strategy and goals.
• Collaborate with other attorneys in the Legal Department as a subject matter expert.
• Stay abreast of, and communicate clearly and succinctly to non-lawyers, changes to or developments in privacy and data protection laws and regulations and their impact on business operations.
• Apply sound business judgment to the provision of legal advice and continuously look for opportunities to improve service.
Requirements
• Juris Doctor required.
• 8+ years of healthcare regulatory or privacy/cybersecurity legal experience; in‑house experience in a large, matrixed healthcare organization strongly preferred.
• Deep expertise in HIPAA, state and federal privacy laws, data governance frameworks, data use regulations, and breach notification requirements.
• Proven ability to evaluate legal risk in complex technical environments, including analytics, AI, and emerging technologies.
• Strong negotiation skills and significant experience drafting/negotiating privacy and data-related contractual terms.
• Highly collaborative individual with the ability to influence others and build strong professional relationships.
• Consistent sound judgment and strong analytic abilities.
• Intellectual flexibility: adept at reassessing priorities to ensure that internal and external expectations are fulfilled.
• Strong ability to navigate through barriers to drive successful initiatives throughout the business.
• Hybrid role – 3 days in office preferred; remote may be considered for exceptional candidates
• If you will be working at home occasionally or permanently, the internet connection must be obtained through a cable broadband or fiber optic internet service provider with speeds of at least 10Mbps download/5Mbps upload.
Benefits
• For this position, we anticipate offering an annual salary of 157,100 - 261,800 USD / yearly, depending on relevant factors, including experience and geographic location.
• This role is also anticipated to be eligible to participate in an annual bonus and long term incentive plan.
• At The Cigna Group, you’ll enjoy a comprehensive range of benefits, with a focus on supporting your whole health.
• Starting on day one of your employment, you’ll be offered several health-related benefits including medical, vision, dental, and well-being and behavioral health programs.
• We also offer 401(k), company paid life insurance, tuition reimbursement, a minimum of 18 days of paid time off per year and paid holidays.
Apply tot his job
Apply To this Job