Senior Privacy Counsel (Healthcare AI)

Location: Chicago, United States

Salary: $175,000–$210,000 annually in Chicago; ranges may vary for other locations.

Company

hirify.global develops a healthcare and precision medicine platform that connects real-world evidence with clinical care, diagnostic tools, and AI products.

What you will do

• Advise on organization-wide HIPAA Security Rule risk analyses across cloud platforms, laboratory systems, and software tools.
• Support HIPAA and HITECH compliance, including Privacy Rule safeguards, Security Rule requirements, and Breach Notification Rule protocols.
• Advise product and data engineering teams on HIPAA de-identification standards for research, machine learning training, and data licensing.
• Draft, review, and negotiate Business Associate Agreements and evaluate privacy risks related to vendors and third-party data handling.
• Update HIPAA policies, procedures, and employee training materials in response to regulatory changes and risk findings.
• Support legal analysis of security incidents, privacy events, and privacy-related litigation matters.

Requirements

• Juris Doctor degree from an accredited U.S. law school.
• Active license to practice law in at least one U.S. state and eligibility for Illinois In-House Counsel registration.
• At least five years of legal experience focused on healthcare data privacy, including hands-on HIPAA compliance experience.
• Experience with HIPAA Security Rule risk analyses, risk mitigation plans, and OCR compliance frameworks.
• Ability to collaborate with CISOs, IT security engineers, data architects, Information Security, Compliance, Clinical Operations, and Product Engineering.
• Experience assisting with HIPAA Breach Notification Rule four-factor risk evaluations and incident response workflows.

Nice to have

• Knowledge of U.S. consumer privacy frameworks and state health privacy laws, including CCPA/CPRA and the Washington My Health My Data Act.
• Experience with EU and UK GDPR, health and genomic data, consent standards, and international data transfers.
• CIPP/US, CIPP/E, or CIPM certification.
• Familiarity with NIST Cybersecurity Framework or ISO 27001 mappings to HIPAA requirements.
• Experience with genomic data, CLIA/CAP-accredited laboratory workflows, or AI/ML training on health data.

Culture & Benefits

• Full-time position reporting to the Chief Privacy Officer.
• Opportunity to support precision medicine, healthcare data innovation, and clinical AI products.
• Benefits may include incentive compensation, restricted stock units, medical benefits, and other benefits depending on the position.