Associate General Counsel, Privacy

Datavant is the data collaboration platform trusted for healthcare. Guided by our mission to make the world’s health data secure, accessible and actionable, we provide critical data solutions for organizations across the healthcare ecosystem - including providers, health plans, researchers, and life sciences companies. From fulfilling a single patient’s request for their medical records to powering the AI revolution in healthcare, Datavanters are building the future of how data is connected and used to improve health. By joining Datavant today, you’re stepping onto a driven and highly collaborative team that is passionate about creating transformative change in healthcare. Role Summary We are seeking an Associate General Counsel, Privacy, to join Datavant's Legal department. This role will provide practical guidance on cybersecurity, privacy, and data governance matters while helping shape and implement Datavant’s global privacy strategy. Reporting directly to the Chief Compliance and Privacy Officer, this position will play a crucial role in ensuring compliance with evolving global privacy frameworks while supporting growth and innovation across Datavant’s enterprise, legal and insurance, life sciences, payer, and provider business units. Key Responsibilities: Strategic Privacy & Security Leadership Support Privacy-by-Design strategy for new products and solutions, including by counseling product, engineering, and business teams on privacy considerations and accountability points to customers and regulators. Support in cybersecurity incident response activities for the Privacy team, including the development and maintenance of policies, playbooks, and response plans. Partner closely with the security team in the development and delivery of tabletop exercises and other cybersecurity education and awareness efforts. Facilitate data mapping and data governance across the enterprise by providing edu Conduct Privacy Impact Assessments (PIAs), Data Protection Impact Assessments (DPIAs), and artificial intelligence reviews on new product development, product enhancement, and data processing activities involving the collection, processing & disclosure of personal information. Build and maintain collaborative partnerships across all Datavant teams, including security, product, engineering, business units, finance, and the people team. Participate in compliance, data use, and other governance initiatives and committees to align the privacy program with Datavant's priorities and mission. Represent Datavant as a privacy and data governance subject matter expert in industry associations and external engagements. Policy Development and Risk Mitigation Collaborate with the Chief Compliance and Privacy Officer to develop and implement compliance policies and procedures, risk assessments, and monitoring processes. Develop, apply, and enforce data governance and information security policies, standards, and procedures to comply with regulatory obligations and contractual requirements. Work with cross-functional teams to identify and mitigate risks, and support risk assessment for the internal audit function. ​​Collaborate with Legal and Security to implement due diligence procedures for third-party vendors and independent contractors' services to assess their compliance capabilities. Collaboration and Advisory Guidance Serve as a subject matter expert on Datavant’s privacy obligations and positions, providing clear and practical advice to senior leadership and various departments. Support the preparation of board reports, executive presentations, regulatory filings, and other legal disclosures to ensure the accuracy and completeness of cybersecurity and privacy representations. Foster strong relationships with key internal and external stakeholders, including industry associations, to support adherence and compliance with data privacy and cybersecurity needs Assist in translating privacy and security legal and regulatory requirements into practical advice that aligns with business priorities. Support due diligence efforts for acquisitions to assess and ensure compliance while integrating acquisitions into the enterprise compliance program. Qualifications J.D. 8+ years’ experience in privacy and data protection, with a strong preference for experience in healthcare or health tech industries. Comprehensive knowledge of federal, state, and global laws related to healthcare regulatory compliance, privacy, and data protection. Proven track record of providing strategic advice to senior leadership on complex compliance and privacy matters. Experience in building, implementing, and maintaining compliance and privacy programs. Strong leadership skills with the ability to influence and collaborate across various departments and levels of the organization. Excellent communication skills, both written and verbal, with the ability to distill complex information into clear, actionable guidance. Strategic thinker with the ability to anticipate problems and find solutions in a timely manner. Adaptability and comfort working in a fast-paced, high-growth environment. Desired Qualifications Ability to navigate a fast-paced, high-growth environment where influencing skills and collaboration are critical, the successful candidate will be business-focused and use knowledge of the law and business to advise on risk/reward trade-offs. With a focus on accomplishing the company’s goals, they will think strategically and proactively offer business counsel. Senior leadership presence, communication skills to effectively articulate your vision, and the ability to influence business leaders at Datavant and across the industry. Proven ability to quickly gain trust, negotiate business objectives, have constructive debate, and work directly with a broad group of senior leaders, including partnering with peer leaders, and business units. Flexibility and willingness to work with all levels of the organization, and to roll up their sleeves to get the job done. Relevant certifications (e.g., CHC, CIPP/US/E, CIPM, CIPT, AIGP) We are committed to building a diverse team of Datavanters who are all responsible for stewarding a high-performance culture in which all Datavanters belong and thrive. We are proud to be an Equal Employment Opportunity employer and all qualified applicants will receive consideration for employment without regard to race, color, sex, sexual orientation, gender identity, religion, national origin, disability, veteran status, or other legally protected status. At Datavant our total rewards strategy powers a high-growth, high-performance, health technology company that rewards our employees for transforming health care through creating industry-defining data logistics products and services. The range posted is for a given job title, which can include multiple levels. Individual rates for the same job title may differ based on their level, responsibilities, skills, and experience for a specific job. This role is eligible for bonus/commission, and the range below is inclusive of those targets. The estimated total cash compensation range for this role is: $263,000—$330,000 USD The estimated base salary range (not including bonus/commission) for this role is: $211,000—$264,000 USD To ensure the safety of patients and staff, many of our clients require post-offer health screenings and proof and/or completion of various vaccinations such as the flu shot, Tdap, COVID-19, etc. Any requests to be exempted from these requirements will be reviewed by Datavant Human Resources and determined on a case-by-case basis. Depending on the state in which you will be working, exemptions may be available on the basis of disability, medical contraindications to the vaccine or any of its components, pregnancy or pregnancy-related medical conditions, and/or religion. This job is not eligible for employment sponsorship. Datavant is committed to a work environment free from job discrimination. We are proud to be an Equal Employment Opportunity employer and all qualified applicants will receive consideration for employment without regard to race, color, sex, sexual orientation, gender identity, religion, national origin, disability, veteran status, or other legally protected status. To learn more about our commitment, please review our EEO Commitment Statement here. Know Your Rights, explore the resources available through the EEOC for more information regarding your legal rights and protections. In addition, Datavant does not and will not discharge or in any other manner discriminate against employees or applicants because they have inquired about, discussed, or disclosed their own pay. At the end of this application, you will find a set of voluntary demographic questions. If you choose to respond, your answers will be anonymous and will help us identify areas for improvement in our recruitment process. (We can only see aggregate responses, not individual ones. In fact, we aren’t even able to see whether you’ve responded.) Responding is entirely optional and will not affect your application or hiring process in any way. Datavant is committed to working with and providing reasonable accommodations to individuals with physical and mental disabilities. If you need an accommodation while seeking employment, please request it here, by selecting the ‘Interview Accommodation Request’ category. You will need your requisition ID when submitting your request, you can find instructions for locating it here. Requests for reasonable accommodations will be reviewed on a case-by-case basis. For more information about how we collect and use your data, please review our Privacy Policy.