Senior Counsel, Privacy

Sun Life•Wellesley, MA

19h•$172,300 - $258,500•Hybrid

About The Position

Sun Life U.S. is seeking a Senior Counsel, Privacy to join its corporate legal team. This role will provide legal and compliance advice on privacy, information security, and the responsible use of data and artificial intelligence, supporting the company's U.S. business operations. The position involves partnering with business leaders and cross-functional stakeholders to develop practical and compliant solutions for key business initiatives within a hybrid work model that requires at least two days per week in the office.

Requirements

J.D. degree and an active license to practice law in at least one U.S. jurisdiction in good standing.
At least 7 years of relevant legal experience with substantial focus on privacy and data protection.
Adept at applying relevant laws to matters and providing proactive, practical advice to colleagues and business clients clearly and concisely.
Proven track record of establishing excellent team-oriented and collaborative interpersonal working relationships.
Demonstrated ability to handle multiple and changing priorities in a fast-paced environment.
A hands-on, collaborative, and curious learner, proactively engaged to keep up with a dynamic and changing business and legal landscape.
Strong analytical, legal research, writing, and communication skills, with excellent attention to detail.

Nice To Haves

Knowledge and experience in insurance and/or financial services is strongly preferred.
Certified Information Privacy Professional or similar certification by the International Association of Privacy Professionals is strongly preferred.

Responsibilities

Provide advice and guidance related to federal and state privacy and information security laws, including HIPAA, Gramm-Leach Bliley, California Consumer Privacy Act, and New York State Cybersecurity Requirements for Financial Services Companies.
Provide day-to-day legal counsel on data collection, use, disclosure, and analytics practices, and the use of artificial intelligence.
Assist with responding to data subject rights requests.
Draft, review, and negotiate privacy and data protection terms in commercial agreements with vendors, clients, and others, as well as data security agreements, business associate agreements, and other similar agreements.
Provide related guidance and support to business and functional leaders throughout the company.
Deliver legal advice and counsel to the compliance and incident response teams to evaluate privacy and data security incidents and notification obligations under applicable state and federal laws.
Monitor changes in laws and regulations relating to privacy, information security, and artificial intelligence, including through active participation in relevant industry groups.
Evaluate the impact of these changes on contracts and business practices and provide proactive, clear, and actionable guidance to internal stakeholders.