Director, Privacy

Required

• You have a J.D. from an accredited law school and active bar admission.
• You bring 8+ years of privacy law experience, including meaningful in-house experience at a healthcare, digital health, or life sciences company and/or at a top-tier law firm counseling healthcare, digital health, and/or life sciences clients.
• You have deep substantive expertise in HIPAA Privacy, Security, and Breach Notification Rules and are fluent in the evolving landscape of state consumer privacy and consumer health data laws (e.g., WMHMDA, CCPA/CPRA) and AI governance.
• You have demonstrated experience managing end-to-end privacy incident response and breach notification processes, from triage and investigation through regulator and stakeholder notifications.
• You have a strong track record of advising on privacy-by-design for digital products, and in digital marketing and advertising ecosystems.
• You communicate complex regulatory concepts clearly and succinctly for non-legal audiences and are skilled at crafting guidance that is practical, actionable, and aligned with business goals.
• You are comfortable operating with substantial autonomy, exercising sound judgment in ambiguous regulatory environments with material legal and reputational stakes.
• You are highly organized, able to manage multiple complex projects simultaneously, and known for strong attention to detail.
• You bring a collegial, low-ego working style, enjoy cross-functional collaboration, and balance rigor with perspective and a sense of humor.