Counsel II (Privacy)

Location: Remote within the United States; locations listed include Pittsburgh, PA and Chicago, IL. Flexibility in working hours is required, with approximately 10% travel.

Base compensation: $160,000–$180,000 per year.

Company

hirify.global develops technology and solutions for healthcare organizations.

What you will do

• Provide practical legal support for sales, procurement, and business teams, including reusable playbooks and guidance.
• Lead privacy-related commercial transactions, including data processing agreements, business associate agreements, security exhibits, and complex privacy and technology terms.
• Scale privacy, data governance, and AI governance programs across Product, Engineering, Marketing, HR, Sales, Security, and Legal.
• Translate privacy, cybersecurity, and AI requirements into governance frameworks, playbooks, tools, templates, and operating processes.
• Lead work involving privacy-by-design, cybersecurity incident response, regulatory compliance, vendor risk, and enterprise data strategy.
• Drive continuous improvement of scalable privacy and governance operating models.

Requirements

• Strong initiative, genuine appetite for learning, and ability to adapt as policies and priorities evolve in a fast-growing technology company.
• Deep command of privacy laws and cybersecurity regulatory frameworks.
• Hands-on experience applying privacy-law requirements, including individual rights, de-identification, and data anonymization.
• Ability to explain complex technical and legal concepts to varied audiences with a solution-oriented approach.
• J.D. and active membership in good standing of a U.S. state bar.
• At least 5 years of data privacy advisory experience in a law firm or in-house, covering regulatory compliance, complex data and technology transactions, and incident response.
• Track record of partnering with cross-functional teams including IT, security, engineering, and compliance.

Nice to have

• CIPP/US or CIPP/E certification, with both preferred.
• CIPM or another relevant privacy or cybersecurity certification.
• Experience advising on HIPAA, healthcare privacy, or regulated health information.
• Familiarity with NIST, ISO 27001, and SOC 2 information security frameworks.
• Experience supporting global or cross-regional privacy programs, including GDPR.
• Experience with regulatory examinations and audits.

Culture & Benefits

• Cross-functional collaboration across business, product, engineering, security, HR, sales, and legal teams.
• Remote work with flexibility in working hours as needed.
• Medical, dental, and vision plans for eligible U.S. employees and dependents.
• Wellness and employee assistance programs, life insurance, disability coverage, retirement plans with matching, and paid time off.
• Drug screening is not required.