Senior Privacy Attorney (Privacy Officer)

Unified Women's Healthcare•Lone Tree, CO

2d•Hybrid

About The Position

Unified is a nationwide community of providers, operations specialists and thought leaders who look for the greatest opportunities to impact every woman’s health, at every stage of their journeys. We are unparalleled in our scale and ability to adapt to address unmet and underserved needs. Through 815+ clinics, 23 IVF labs, nationwide telehealth capabilities and targeted case management, our 2,700+ independent, affiliated providers deliver comprehensive women’s health services and continuously work to implement methods and develop techniques or platforms that improve the healthcare experience. We remain focused on enabling the discovery of new ways for our affiliated providers to deliver the high-quality care experience women deserve, in the ways they most wish to receive it, and collaborate across our community to make our vision a reality. The Sr Counsel - Privacy (Privacy Officer) leads the organization's privacy program and is responsible for establishing, implementing, and continuously improving privacy governance, policies, controls, and compliance activities. This role serves as the subject matter expert on privacy regulations and works cross-functionally with Legal, Compliance, Information Security, HR, Technology, and business leaders to ensure the protection and appropriate use of personal and sensitive information across the enterprise.

Requirements

Bachelor's degree in Business, Law, Information Security, Compliance, Risk Management, or related field.
10+ years of progressive experience in privacy, legal, or information governance.
4-7+ years of leadership experience managing programs or enterprise initiatives.
Juris Doctor (JD) from an accredited law school
Active bar membership and in good standing in at least one U.S. jurisdiction
Deep knowledge of privacy regulations and industry best practices
Experience interacting with executive leadership and regulatory bodies.
Experience leading privacy programs in a complex, highly regulated environment
Demonstrated ability to manage competing priorities and deadlines in fast paced environment
Excellent written and verbal communication skills
Strong analytical and problem-solving capabilities

Responsibilities

Provide legal guidance associated with applicable privacy laws and regulations.
Develop and lead the enterprise-wide privacy strategy, governance framework, training, policies, and standards to ensure effective management of privacy risks.
Ensure compliance with applicable federal, state, and industry privacy laws and regulations, including monitoring regulatory changes and advising leadership on impacts.
Lead the design, implementation, and continuous improvement of the organization's privacy program, processes, and controls.
Oversee privacy risk assessments, data protection impact assessments (DPIAs), and privacy reviews of new products, technologies, systems, and business initiatives.
Partner with Legal, Compliance, Information Security, HR, Technology, and business leaders to embed privacy-by-design principles across the organization.
Direct privacy incident response activities, including investigation, risk assessment, regulatory reporting, and remediation efforts when privacy events occur.
Oversee third-party privacy risk management, including review of vendor data handling practices, contracts, and data-sharing arrangements.
Develop and deliver privacy education, training, and awareness programs to strengthen organizational accountability and compliance.
Provide strategic leadership, reporting, and recommendations to executive leadership and governance committees regarding privacy risks, program effectiveness, and compliance performance.
Other duties as assigned.