Corporate Counsel III (Privacy, Digital Risk, and AI Governance)

Premier Inc.

1d•$141,000 - $234,000•Remote

About The Position

Working as part of Premier’s Privacy Office, the Corporate Counsel III advises the company on compliance with applicable privacy, AI, and digital laws, regulations, and industry frameworks, including U.S. state privacy and AI laws, HIPAA and HITECH, the EU AI Act, and the NIST AI Risk Management Framework. The attorney serves as the team’s principal legal specialist for AI regulatory compliance and partners with another Corporate Counsel III on privacy compliance and digital risk oversight. The role provides practical, risk-based guidance to business teams, the AI & Data Analytics organization, and Legal. The attorney partners with AI & Data Analytics, Technology, Security, and business teams to develop and operationalize privacy, AI, and digital governance programs. The work includes translating legal requirements into scalable processes and controls for privacy and AI impact assessments, AI use-case review and classification, online privacy and digital compliance, and specialized contract negotiations. The position also monitors evolving legal requirements and advises stakeholders on their impact. The role is suited to a proactive, business-minded attorney who can work independently and collaboratively, give clear recommendations, and operate in a fast-paced, complex environment. The position is remote, with 1–20% travel within the United States. The internal salary range is $141,000–$234,000, with final compensation dependent on factors including budget, equity, education, skills, experience, and location.

Requirements

Juris Doctorate.
At least 7 years of applicable experience.
Active license in good standing to practice law in at least one U.S. jurisdiction, with eligibility to serve as in-house counsel as required.
Substantive knowledge of U.S. privacy and data protection laws, including HIPAA and HITECH, state comprehensive privacy laws, state consumer health data laws, and requirements governing personal information.
Ability to interpret AI laws, regulations, and governance frameworks, including U.S. federal and state requirements, the EU AI Act, and the NIST AI Risk Management Framework, and translate them into practical guidance.
Experience advising on AI systems and assessing regulatory roles, prohibited or high-risk use cases, consequential decision-making, transparency, human oversight, documentation, and governance.
Hands-on experience conducting or providing legal oversight for privacy, AI, and digital risk assessments and processes, such as impact assessments, records of processing activities, data subject request workflows, AI use-case intake and classification, supplier reviews, and assessments of new initiatives.
Experience advising business, product, technology, AI, and data stakeholders on new products, services, systems, vendors, and AI use cases, and recommending practical controls or risk mitigations.
Experience advising on digital compliance, including privacy disclosures, tracking technologies, cookies and consent, digital terms and conditions, consumer-facing data practices, and accessibility-related legal requirements.
Experience drafting, reviewing, and negotiating specialized or complex privacy, AI, and technology provisions in commercial agreements, including data processing agreements, business associate agreements, and AI provisions.
Experience developing, implementing, or materially improving privacy, AI, or digital governance programs and associated policies, procedures, methodologies, documentation, and workflows.
Ability to remain stationary for prolonged periods and perform sedentary work.
Ability to adapt and change priorities quickly, meet deadlines, and maintain attention to detail.
Ability to operate computer programs and software and communicate effectively in person and electronically.
Ability to work collaboratively in close quarters with peers and manage varying interruptions, while making independent decisions.
Willingness to travel 1–20% within the United States.

Nice To Haves

Relevant privacy or AI governance certification, such as CIPP/US, CIPP/E, CIPM, CIPT, or AIGP.
Experience operationalizing privacy, AI, and digital risk programs and related processes.
Familiarity with OneTrust, Transcend, or similar privacy or AI governance platforms.
At least 5 years of relevant legal experience, preferably 5–7 or more years, advising on privacy, AI, digital compliance, technology, or related regulatory matters in a law firm, in-house legal department, government agency, or comparable environment.

Responsibilities

Support compliance with applicable privacy and AI laws and related industry frameworks by monitoring and interpreting developing laws, regulations, and frameworks.
Provide legal oversight and guidance on digital compliance risks, including website and application terms and conditions, online tracking technologies, digital accessibility, digital asset disclosures, and employee data access policies.
Apply privacy, AI, and digital compliance-by-design principles to applicable initiatives to support enterprise innovation and growth.
Conduct enterprise legal risk reviews, including privacy and AI impact assessments, data subject rights requests, supplier privacy reviews, and legal review and classification of AI use cases.
Contribute to the modernization and development of Premier’s Digital & Data Legal and Governance organization, policies and procedures, and risk governance framework across privacy, AI, and digital matters.
Advise on privacy- and AI-related incidents, investigations, mitigation and response activities, regulatory reporting, and regulatory inquiries, working with internal stakeholders and external parties as needed.
Serve as a primary legal specialist for the AI & Data Analytics Office and Legal on privacy, AI, and digital regulatory compliance and risk.
Maintain related policies and contract templates and advise on specialized or complex privacy, AI, and digital matters.
Advise on AI systems’ development, procurement, deployment, and use; assess the organization’s regulatory role and use-case risks; and support transparency, human oversight, documentation, and governance processes.
Advise stakeholders on product, service, system, vendor, and AI use-case design or implementation, identifying relevant requirements early and recommending practical controls or mitigations.
Draft, review, and negotiate complex privacy, AI, and technology contract provisions, including data processing agreements, business associate agreements, and AI-related terms.
Develop, implement, or improve governance program components such as policies, standards, procedures, assessment methodologies, inventories, templates, decision records, escalation protocols, training materials, and compliance workflows.