Cencora
Senior Counsel - Data Governance, Privacy, and Cybersecurity
Cencora, Conshohocken, Pennsylvania, United States
Our team members are at the heart of everything we do. At Cencora, we are united in our responsibility to create healthier futures, and every person here is essential to us being able to deliver on that purpose. If you want to make a difference at the center of health, come join our innovative company and help us improve the lives of people and animals everywhere. Apply today!
Job Details
Position Summary: Cencora seeks an attorney with significant experience in data governance, privacy, cybersecurity, and emerging AI issues to provide strategic legal advice on data risk management and innovation. This role reports to the
Assistant General Counsel - Data Governance, Privacy, and Cybersecurity
and collaborates across legal, business, and functional teams.
The role requires expertise in US, Canada, and LA privacy, cybersecurity, and AI laws, regulations, and guidance, including analysis of HIPAA and healthcare privacy laws.
The successful candidate will possess strong analytical skills, business-oriented legal acumen, and project management abilities, providing strategic insights to compliance teams and developing governance mechanisms for emerging data and technology law areas. Primary Duties and Responsibilities:
Advise on complex legal, regulatory, and policy questions related to data privacy (federal, state, Canadian, and LA laws), cybersecurity (e.g., CMMC, NIST, ISO 27001, HITRUST), and AI (e.g., NIST RMF, state and local AI laws). Draft, review, negotiate contracts, including healthcare and HIPAA-related agreements, and create templates and playbooks for privacy, cyber, and AI law issues. Assess and mitigate harms from privacy and cybersecurity incidents through communication, escalation, and collaboration with stakeholders. Review technology proposals involving privacy, cyber, and AI risks, providing pragmatic, privacy-by-design solutions. Demonstrate calm, decisive communication during incidents or high-risk proposals requiring escalation. Manage multiple projects efficiently, ensuring high-value and high-risk issues are addressed strategically. Experience and Education Requirements
Minimum 5-7 years as a lawyer with a focus on privacy, data governance, and cybersecurity. Prior in-house and cross-functional experience in multinational companies preferred. Healthcare legal experience is a plus.
Must be a graduate of an accredited law school and admitted to a US state bar in good standing.
This role is akin to a senior associate in a law firm, capable of sophisticated counseling with limited supervision. Minimum Skills, Knowledge, and Abilities:
Familiarity with privacy, cybersecurity, AI laws across NA and LA, including cyber disclosures to regulators like the SEC. Knowledge of healthcare laws, especially HIPAA, is a plus. Ability to synthesize legal themes across jurisdictions for risk management counseling in multi-country tech launches. Experience managing outside counsel and liaising with legal and technical experts. Ability to understand evolving business models and tech trends, aligning legal requirements with strategic investments. Experience advising senior management with clear risk assessments and mitigation strategies. Strong soft skills for incident management and risk escalation, projecting confidence under pressure. Proven collaboration with compliance teams, providing operational guidance and feedback. Privacy, AI, or security certifications (e.g., CIPP, CIPM, CISSP) are preferred. Excellent negotiation, prioritization, multitasking, and client relationship skills. What Cencora Offers
We provide competitive compensation, comprehensive benefits supporting wellness, and opportunities for personal and professional growth, including training, mentorship, and employee resource groups. For details, visit
https://www.virtualfairhub.com/cencora . Position Type:
Full-time Salary Range:
$121,000 - $186,230
*Note: Salary varies by location, potentially 10% lower or higher depending on the state. Equal Employment Opportunity
Cencora is committed to diversity and equal opportunity. We prohibit harassment and comply with all legal requirements for accommodations. To request accommodations, contact
hrsc@cencora.com .
#J-18808-Ljbffr
Position Summary: Cencora seeks an attorney with significant experience in data governance, privacy, cybersecurity, and emerging AI issues to provide strategic legal advice on data risk management and innovation. This role reports to the
Assistant General Counsel - Data Governance, Privacy, and Cybersecurity
and collaborates across legal, business, and functional teams.
The role requires expertise in US, Canada, and LA privacy, cybersecurity, and AI laws, regulations, and guidance, including analysis of HIPAA and healthcare privacy laws.
The successful candidate will possess strong analytical skills, business-oriented legal acumen, and project management abilities, providing strategic insights to compliance teams and developing governance mechanisms for emerging data and technology law areas. Primary Duties and Responsibilities:
Advise on complex legal, regulatory, and policy questions related to data privacy (federal, state, Canadian, and LA laws), cybersecurity (e.g., CMMC, NIST, ISO 27001, HITRUST), and AI (e.g., NIST RMF, state and local AI laws). Draft, review, negotiate contracts, including healthcare and HIPAA-related agreements, and create templates and playbooks for privacy, cyber, and AI law issues. Assess and mitigate harms from privacy and cybersecurity incidents through communication, escalation, and collaboration with stakeholders. Review technology proposals involving privacy, cyber, and AI risks, providing pragmatic, privacy-by-design solutions. Demonstrate calm, decisive communication during incidents or high-risk proposals requiring escalation. Manage multiple projects efficiently, ensuring high-value and high-risk issues are addressed strategically. Experience and Education Requirements
Minimum 5-7 years as a lawyer with a focus on privacy, data governance, and cybersecurity. Prior in-house and cross-functional experience in multinational companies preferred. Healthcare legal experience is a plus.
Must be a graduate of an accredited law school and admitted to a US state bar in good standing.
This role is akin to a senior associate in a law firm, capable of sophisticated counseling with limited supervision. Minimum Skills, Knowledge, and Abilities:
Familiarity with privacy, cybersecurity, AI laws across NA and LA, including cyber disclosures to regulators like the SEC. Knowledge of healthcare laws, especially HIPAA, is a plus. Ability to synthesize legal themes across jurisdictions for risk management counseling in multi-country tech launches. Experience managing outside counsel and liaising with legal and technical experts. Ability to understand evolving business models and tech trends, aligning legal requirements with strategic investments. Experience advising senior management with clear risk assessments and mitigation strategies. Strong soft skills for incident management and risk escalation, projecting confidence under pressure. Proven collaboration with compliance teams, providing operational guidance and feedback. Privacy, AI, or security certifications (e.g., CIPP, CIPM, CISSP) are preferred. Excellent negotiation, prioritization, multitasking, and client relationship skills. What Cencora Offers
We provide competitive compensation, comprehensive benefits supporting wellness, and opportunities for personal and professional growth, including training, mentorship, and employee resource groups. For details, visit
https://www.virtualfairhub.com/cencora . Position Type:
Full-time Salary Range:
$121,000 - $186,230
*Note: Salary varies by location, potentially 10% lower or higher depending on the state. Equal Employment Opportunity
Cencora is committed to diversity and equal opportunity. We prohibit harassment and comply with all legal requirements for accommodations. To request accommodations, contact
hrsc@cencora.com .
#J-18808-Ljbffr