Associate Director, Privacy Counsel (Healthcare Data Privacy)

Location: Onsite in Boston, Massachusetts, United States

Salary: $195,300–$244,200 per year, plus a potential discretionary annual bonus and benefits.

Company

hirify.global operates in healthcare and life sciences, with a focus on patient, customer, and research participant data.

What you will do

• Serve as a privacy subject matter expert and independently advise business, clinical, research, commercial, legal, compliance, product, medical, information security, and marketing stakeholders.
• Interpret and apply U.S. and ex-U.S. privacy laws, including HIPAA, GDPR, state consumer and genetic privacy laws, and related regulatory frameworks.
• Advise on informed consent, HIPAA authorizations, research protocols, secondary data use, and de-identification, pseudonymization, and anonymization standards.
• Support investigation, remediation, and notification activities for privacy and cybersecurity incidents.
• Draft, review, and negotiate data use, data protection, vendor, data sharing, research, clinical trial, and collaboration agreements.
• Advance the enterprise privacy program through policies, procedures, training, awareness activities, committee participation, presentations, workflow prioritization, and coordination with outside privacy counsel.

Requirements

• Juris Doctor degree from an accredited law school and active U.S. bar membership in good standing.
• 7+ years of progressive legal experience, including at least 5 years advising healthcare or life sciences organizations on data privacy law.
• Ability to advise on HIPAA, GDPR, the FTC Act, CCPA and other state privacy laws, and genetic information privacy and security laws.
• Experience working in a privacy program at a HIPAA Covered Entity or advising HIPAA Covered Entity clients.
• Experience working in a GDPR-compliant Controller privacy program or advising clients on GDPR compliance.
• Ability to apply risk-based analysis, develop practical solutions, prioritize multiple requests, and provide timely, complete advice.
• Strong relationship-building, leadership, influencing, collaboration, analytical, communication, presentation, judgment, and problem-solving skills.
• Ability to work independently in a dynamic, evolving, fast-paced environment with high integrity and attention to detail.
• Commitment to FMI’s values of Integrity, Courage, and Passion, and understanding of HIPAA and patient data privacy.

Nice to have

• Prior experience at a top-tier law firm.
• Prior in-house privacy experience at a healthcare company or institution, such as a diagnostics, medical device, pharmaceutical, biotechnology, hospital, or healthcare provider organization.
• CIPP/US or CIPP/E certification.

Culture & Benefits

• Full-time position with required compliance with FMI’s attendance policies.
• Benefits are provided, and a discretionary annual bonus may be available based on individual and company performance.
• Work includes collaboration across legal, compliance, business, clinical, research, commercial, medical, information security, and marketing functions.