Director, AI & Cybersecurity Legal

Location: Remote, United States; primary location is North Wales, Pennsylvania. Additional U.S. locations may have different compensation guidelines. Domestic relocation is listed, and travel requirements are 10%.

Salary: $190,800–$300,300 annual base salary for the primary location, plus eligibility for an annual bonus and long-term incentive where applicable.

Company

hirify.global is a global pharmaceutical company operating in a highly regulated environment.

What you will do

• Provide strategic legal counsel on the design, development, procurement, deployment, and governance of AI and machine learning systems across research, commercial, and corporate functions.
• Develop AI governance policies and risk assessment frameworks covering responsible AI, algorithmic transparency, bias mitigation, human oversight, third-party due diligence, automation, and incident reporting.
• Monitor global AI regulations, including the EU AI Act and FDA guidance, and advise on AI contracts, technology transactions, data rights, and third-party platforms.
• Advise the CISO and Information Technology Risk Management organization on cybersecurity regulations, incident response, breach notifications, vulnerability disclosure, threat intelligence, and law-enforcement engagement.
• Review cybersecurity policies, vendor security assessments, and security provisions in commercial agreements.
• Partner with privacy, compliance, legal, technology, and business stakeholders on data governance, M&A, licensing, collaborations, training, and awareness.

Requirements

• J.D. from an accredited law school and active membership in at least one U.S. state bar.
• At least 10 years of legal experience, including at least 5 years focused on cybersecurity, technology, and/or AI/emerging technology law.
• Experience in pharmaceutical, life sciences, healthcare, or another highly regulated environment is preferred within the stated experience background; data privacy or data protection experience is a plus.
• Deep understanding of HIPAA, GDPR, NIS2, SEC cybersecurity disclosure rules, state breach notification laws, NIST frameworks, and emerging AI and automated decision-making regulations.
• Extensive experience managing cybersecurity incident response from a legal perspective.
• Experience advising on AI governance, responsible AI principles, technology transactions, AI risk assessments, auditability, transparency obligations, and lifecycle governance.
• Experience developing and negotiating cybersecurity, data protection, and AI contractual provisions for M&A, collaborations, strategic partnerships, and technology transactions.
• Strategic judgment, analytical and pragmatic legal advice, executive presence, and the ability to influence senior leadership and cross-functional stakeholders in a matrixed global organization.
• Exceptional written and verbal communication, strong technical aptitude, fluency with AI, data, and cybersecurity concepts, attention to detail, and the ability to prioritize multiple tasks.

Nice to have

• CIPP/E, CIPP/US, CIPM, AIGP, or another AI certification.
• Additional data privacy or data protection experience.

Culture & Benefits

• Remote flexible work arrangement for the U.S. role with a first-shift daytime schedule.
• Medical, dental, vision, healthcare, and other insurance benefits for employees and families.
• Retirement benefits, including a 401(k), paid holidays, vacation, compassionate leave, and sick days.
• Inclusive environment focused on bringing together diverse perspectives and challenging ideas respectfully.
• Visa sponsorship is not available.