Senior Counsel - Data Governance, Privacy, and Cybersecurity

Position Summary:
Cencora seeks an attorney with significant experience in data governance, privacy, cybersecurity, and emerging artificial intelligence issues to provide strategic legal advice on data risk management and innovation. This role reports to the Assistant General Counsel - Data Governance, Privacy, and Cybersecurity and collaborates with legal, business, and functional teams across the enterprise.

The role requires expertise in US, Canada, and LA privacy, cybersecurity, and AI laws, regulations, and guidance, with routine analysis of HIPAA and healthcare privacy laws.

The successful candidate should have strong analytical skills, business-oriented legal acumen, and project management capabilities, providing strategic insights to compliance teams and developing governance for emerging data and technology law areas.

Primary Duties and Responsibilities:

1. Advise on complex legal, regulatory, and policy questions related to data privacy, protection (including HIPAA, state privacy laws, Canadian laws), cybersecurity (e.g., CMMC, NIST, ISO 27001, HITRUST), and artificial intelligence (e.g., NIST RMF, state and local AI laws).
2. Draft, review, and negotiate contracts, including healthcare and HIPAA-related agreements, focusing on privacy, cybersecurity, AI, and data protection. Develop templates and playbooks to streamline contract management.
3. Assess and mitigate harms from privacy and cybersecurity incidents through communication, issue escalation, and stakeholder partnership.
4. Review technology proposals involving privacy, cyber, and AI risks, providing pragmatic, privacy-by-design solutions.
5. Demonstrate strong decision-making and communication skills during incidents or high-risk proposals requiring escalation.
6. Manage multiple projects efficiently, prioritizing high-value and high-risk initiatives strategically.

Experience and Education Requirements

Minimum 5-7 years as a lawyer, with focus on privacy, data governance, and cybersecurity. In-house experience and work with multinational or healthcare companies preferred. Must be a graduate of an accredited law school, admitted to and in good standing with a US state bar. This role is akin to a senior associate in a law firm, capable of sophisticated counseling with limited supervision.

Minimum Skills, Knowledge, and Abilities:

• Knowledge of privacy, cybersecurity, AI laws across NA and LA, including cyber disclosures to bodies like SEC. Healthcare laws like HIPAA are a plus.
• Ability to communicate themes across jurisdictions for risk management in multi-country tech launches or investments.
• Experience managing outside counsel and liaising with legal and technical experts.
• Ability to understand new business models and technology trends, integrating legal requirements with business strategy.
• Experience advising senior management, with clear risk communication and mitigation strategies.
• Calm and confident soft skills for incident management and risk escalation.
• Collaborative skills with compliance teams, providing operational guidance.
• Privacy, AI, or security certifications (e.g., CIPP, CIPM, CISSP) preferred.
• Negotiation, prioritization, multitasking, and client management skills to build strong relationships.

What Cencora offers

We offer competitive compensation, benefits, and resources fostering an inclusive culture supporting purpose-driven work. Benefits include health, wellness, family support, professional development, mentorship, employee groups, and volunteer opportunities. Details at https://www.virtualfairhub.com/cencora.

Position Type: Full-time

$121,000 - $186,230
*Salary varies by location, with adjustments in Colorado, California, Washington, New York, Hawaii, Vermont, Minnesota, Massachusetts, Illinois.

Equal Employment Opportunity

Cencora is committed to equal opportunity employment, non-discrimination, and providing reasonable accommodations for individuals with disabilities. For accommodation requests, contact 888.692.2272 or . Messages unrelated to accommodations will not be responded to.

Affiliated Company: AmerisourceBergen Services Corporation

#J-18808-Ljbffr