Sr Counsel, Data Governance

We need to output HTML fragment with sections: About the role, Responsibilities (maybe Accountabilities), Requirements, Benefits, maybe Pay (base salary), Schedule (remote work). Also maybe Qualifications? The posting includes "Requirements" and "Benefits". Also "Pay" (base salary). "Schedule" (Remote work within the United States). Also maybe "About the role" from intro. We must not repeat job title as heading. No Job ID. Remove boilerplate like "This position is listed on behalf of a partner company..."? Actually that is part of description but maybe considered boilerplate? It says "This position is listed on behalf of a partner company, who manages all applications and next steps." That's meta about application process; we should remove application instructions and partner company note? The instruction: Remove cookie/navigation/legal/EEO/equal-opportunity/scam-warning boilerplate, duplicated lines, and application instructions. The partner company note is about applications; could be considered application instructions. Probably remove it. Also remove "How Jobgether Works", "Why Apply Through Jobgether?", Data Privacy Notice, etc. Keep substantive content: role description, accountabilities, requirements, benefits, base salary, remote work, etc. We need sections: About the role (intro paragraph). Responsibilities (the Accountabilities bullet list). Requirements (list). Benefits (list). Pay (base salary). Schedule (Remote work within the United States). Possibly also Qualifications? Not needed. We must not create sections with filler like "commensurate with experience". Not present. We need to use

for section headings. Use

• for any list of duties/requirements/benefits. Use

  for prose. We must preserve ALL substantive information; do not invent or summarize away detail. Let's extract substantive content: Intro: "Our partner is looking for a Sr Counsel, Data Governance based in the United States. As Sr Counsel, Data Governance, you’ll own the legal and regulatory strategy governing how data is collected, used, shared, retained, and applied to AI. Reporting to the Chief Compliance and Privacy Officer, you’ll serve as a key legal partner to senior leadership and teams across Sales, Technology, Product, Security, and other functions. This is a hands-on owner-operator role where you’ll translate complex privacy, data, and AI requirements into contracts, policies, controls, and practical operating processes. You’ll lead sophisticated negotiations around data rights while also running critical privacy and AI governance programs. The role offers significant exposure to high-impact business decisions and requires strong judgment in a highly regulated healthcare environment. You’ll build, implement, monitor, audit, and continuously improve governance frameworks rather than simply providing legal advice. This is an opportunity to shape responsible data and AI practices within a technology-driven organization focused on advancing healthcare." That's the About the role. Accountabilities (list): many bullet-like sentences separated by periods. We need to convert each to

• . Let's list them: - Lead negotiations involving data rights across client and partner agreements, including BAAs, DPAs, data use agreements, data sharing agreements, and other contracts governing data use, ownership, secondary use, AI training and application, system outputs, intellectual property, retention, deletion, de-identification, disclosure, and downstream use. - Proactively review and renegotiate existing agreements when necessary to secure appropriate data rights and manage regulatory and contractual risk. - Lead the day-to-day operation of the Privacy Program, including HIPAA and state privacy and consumer health data requirements, privacy notices and consents, consumer rights, privacy incidents, breach determinations, required notifications, regulatory inquiries, and ongoing compliance activities. - Operate and administer the AI Governance Program, including interpreting federal and state AI requirements, maintaining governance frameworks and policies, supporting the AI Governance Committee, managing approval processes and AI inventories, conducting risk assessments, implementing responsible AI controls, maintaining governance records, and managing regulatory change. - Develop and implement the legal and regulatory framework for data governance, covering data collection, use, sharing, secondary use and reuse, AI applications, retention, de-identification, deletion, disclosure, data residency, and cross-border transfers. - Translate changing legal and regulatory requirements into practical policies, controls, procedures, implementation plans, and operational standards. - Build and maintain data governance systems and controls, including data maps, records of processing, data classification and handling standards, contractual obligation repositories, retention and disposal requirements, and vendor and third-party privacy reviews. - Partner with Product, Engineering, Security, AI, Commercial, User Support, and other teams to implement privacy, data, and AI requirements through product design, technical controls, notices, consents, and operational processes. - Serve as a day-to-day escalation point for questions involving privacy, data, rights, permissible data use, and AI governance, escalating material risks to senior compliance leadership. - Lead privacy, data, and AI risk and incident management, including assessments, incident response, breach analysis, required notifications, corrective actions, and remediation through completion. - Manage compliance monitoring and assurance activities, including audits, client audits, regulatory inquiries, investigations, certifications, attestations, and enterprise customer trust and assurance requests. - Review representations concerning privacy, data, and AI practices and drive remediation when compliance gaps are identified. - Develop and maintain policies, playbooks, training materials, and reporting for privacy, data governance, AI governance, responsible AI, and data rights. - Provide training to Product, Engineering, Commercial, User Support, and other relevant teams, as well as executive-level reporting on program performance, risks, findings, and remediation. That's a lot; we keep all. Requirements list: - 8+ years of legal experience with substantial healthcare regulatory, privacy, and compliance experience within a HIPAA-regulated organization; healthcare experience is required. - Significant experience negotiating complex data rights with sophisticated enterprise clients and partners, ideally including health plans, healthcare organizations, or other heavily regulated counterparties. - Demonstrated ability to independently lead difficult negotiations involving data use, ownership, AI rights, secondary use, retention, deletion, de-identification, and related contractual restrictions. - Experience operating healthcare privacy and compliance programs, including regulatory interpretation, risk assessments, incident and breach response, monitoring, auditing, corrective actions, and remediation. - Strong compliance judgment and an owner-operator mindset, with the ability to move from legal interpretation to practical implementation and drive initiatives through resolution. - Advanced AI fluency and automation capabilities, including extensive use of AI in substantive legal and compliance work and the ability to automate repeatable workflows. - Comfort building and using AI agents or similar tools to improve speed, quality, consistency, and leverage within a lean team. - Experience with AI governance, including emerging AI laws, risk assessments, approval workflows, AI inventories, responsible AI controls, and ongoing monitoring. - Exceptional judgment, executive presence, and communication skills, with the ability to represent the organization in high-stakes negotiations and effectively challenge sophisticated internal and external stakeholders when necessary. - Active license to practice law and membership in good standing with a U.S. state bar. - Experience with international privacy and data protection requirements, including cross-border data transfers, is a plus. - Privacy or AI governance certifications such as CIPP/US, CIPM, or AIGP are advantageous. - Experience building privacy or AI governance programs within a growth-stage or high-growth company is a plus. - Experience managing client trust programs, security questionnaires, certifications, attestations, or enterprise customer assurance programs is beneficial. Benefits list: - Base salary of $204,000–$226,000 USD. - Equity and comprehensive benefits may be provided in addition to base salary. - Remote work within the United States. - Positive, diverse, and supportive work environment. - Collaborative culture that values creativity, courage, and diverse perspectives. - Opportunity to work directly on privacy, data governance, and responsible AI initiatives within a healthcare technology environment. - Significant exposure to senior executives and high-impact legal, regulatory, and business decisions. - Opportunity to build and operate governance programs in a technology-driven organization. - Candidates must be legally authorized to work in the United States. We need separate sections: Pay (base salary) and Schedule (Remote work). But benefits already includes base salary and remote work. However instruction: "Prefer a few substantive sections over many thin ones." Could combine Benefits and Pay/Schedule into Benefits section? But they said include a section ONLY when posting has real, specific content for it — never emit a heading followed by filler/placeholder text. They also said: "Prefer a few substantive sections over many thin ones." So we could have sections: About the role, Responsibilities, Requirements, Benefits (which includes base salary, equity, remote work, etc). That would satisfy. However they also said: "Use

  for section headings (e.g. About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule)." They gave examples but not mandatory to use all. We can choose to have Benefits section covering base salary etc. That seems fine. But we also need to ensure we don't miss any substantive info: The base salary is included in Benefits bullet. Remote work also in Benefits bullet. That's okay. We must not include "Candidates must be legally authorized to work in the United States." That's a requirement? It's under Benefits list but actually it's a requirement. Could move to Requirements? But it's under Benefits list in original. We'll keep it as a bullet under Benefits (makes sense). It's substantive. Now we need to output HTML fragment only, no /, no markdown. Let's craft:

  About the role

  Our partner is looking for a Sr Counsel, Data Governance based in the United States. As Sr Counsel, Data Governance, you’ll own the legal and regulatory strategy governing how data is collected, used, shared, retained, and applied to AI. Reporting to the Chief Compliance and Privacy Officer, you’ll serve as a key legal partner to senior leadership and teams across Sales, Technology, Product, Security, and other functions. This is a hands-on owner-operator role where you’ll translate complex privacy, data, and AI requirements into contracts, policies, controls, and practical operating processes. You’ll lead sophisticated negotiations around data rights while also running critical privacy and AI governance programs. The role offers significant exposure to high-impact business decisions and requires strong judgment in a highly regulated healthcare environment. You’ll build, implement, monitor, audit, and continuously improve governance frameworks rather than simply providing legal advice. This is an opportunity to shape responsible data and AI practices within a technology-driven organization focused on advancing healthcare.

  Responsibilities

  • Lead negotiations involving data rights across client and partner agreements, including BAAs, DPAs, data use agreements, data sharing agreements, and other contracts governing data use, ownership, secondary use, AI training and application, system outputs, intellectual property, retention, deletion, de-identification, disclosure, and downstream use.
  • Proactively review and renegotiate existing agreements when necessary to secure appropriate data rights and manage regulatory and contractual risk.
  • Lead the day-to-day operation of the Privacy Program, including HIPAA and state privacy and consumer health data requirements, privacy notices and consents, consumer rights, privacy incidents, breach determinations, required notifications, regulatory inquiries, and ongoing compliance activities.
  • Operate and administer the AI Governance Program, including interpreting federal and state AI requirements, maintaining governance frameworks and policies, supporting the AI Governance Committee, managing approval processes and AI inventories, conducting risk assessments, implementing responsible AI controls, maintaining governance records, and managing regulatory change.
  • Develop and implement the legal and regulatory framework for data governance, covering data collection, use, sharing, secondary use and reuse, AI applications, retention, de-identification, deletion, disclosure, data residency, and cross-border transfers.
  • Translate changing legal and regulatory requirements into practical policies, controls, procedures, implementation plans, and operational standards.
  • Build and maintain data governance systems and controls, including data maps, records of processing, data classification and handling standards, contractual obligation repositories, retention and disposal requirements, and vendor and third-party privacy reviews.