Associate Senior Privacy Counsel, Data Governance & Cybersecurity

Experienced privacy attorney will support the Office of Privacy and Innovation Governance, reporting to the Chief Privacy Counsel. This role will counsel on matters related to privacy, cybersecurity, data use, and technology matters, and partner closely with our Evernorth business unit. This role requires expertise in HIPAA, state and federal privacy laws, data use regulations, and breach notification laws; seasoned judgment; diplomacy; exceptional communication skills; and a demonstrated ability to proactively identify and resolve issues.

Key Responsibilities :

• Provide counsel related to advanced and cutting-edge data use and acquisition, as well as data mapping, classification, and related data management and governance.
• Manage complex legal issues and risk related to data analytics, AI, de-identification, and use of nascent and emergent technologies.
• Support the privacy, security, and data protection aspects of relationships and contracts with technology companies, pharmaceutical manufacturers, HIEs, EMRs, app developers, and data aggregators.
• Interpret and apply privacy and data protection law and contractual requirements to a wide variety of business initiatives, such as (i) the development of clinical programs for patients and plan members; (ii) communications to providers and patients; (iii) policy development; (iv) collaboration and data exchange between affiliated and outside entities; and (v) digital initiatives such as website, email, text, social media, mobile apps, etc.
• Negotiate privacy and data use provisions, consistent with the company’s strategy and goals.
• Collaborate with other attorneys in the Legal Department as a subject matter expert.
• Stay abreast of, and communicate clearly and succinctly to non-lawyers, changes to or developments in privacy and data protection laws and regulations and their impact on business operations.
• Apply sound business judgment to the provision of legal advice and continuously look for opportunities to improve service.

Qualifications:

• Juris Doctor required.

• 8+ years of healthcare regulatory or privacy/cybersecurity legal experience; in‑house experience in a large, matrixed healthcare organization strongly preferred.

• Deep expertise in HIPAA, state and federal privacy laws, data governance frameworks, data use regulations, and breach notification requirements.

• Proven ability to evaluate legal risk in complex technical environments, including analytics, AI, and emerging technologies.

• Strong negotiation skills and significant experience drafting/negotiating privacy and data-related contractual terms.

• Highly collaborative individual with the ability to influence others and build strong professional relationships.
• Consistent sound judgment and strong analytic abilities.
• Intellectual flexibility: adept at reassessing priorities to ensure that internal and external expectations are fulfilled.
• Strong ability to navigate through barriers to drive successful initiatives throughout the business.

• Hybrid role – 3 days in office preferred; remote may be considered for exceptional candidates

If you will be working at home occasionally or permanently, the internet connection must be obtained through a cable broadband or fiber optic internet service provider with speeds of at least 10Mbps download/5Mbps upload.

For this position, we anticipate offering an annual salary of 157,100 - 261,800 USD / yearly, depending on relevant factors, including experience and geographic location.

This role is also anticipated to be eligible to participate in an annual bonus and long term incentive plan.

At The Cigna Group, you’ll enjoy a comprehensive range of benefits, with a focus on supporting your whole health. Starting on day one of your employment, you’ll be offered several health-related benefits including medical, vision, dental, and well-being and behavioral health programs. We also offer 401(k), company paid life insurance, tuition reimbursement, a minimum of 18 days of paid time off per year and paid holidays. For more details on our employee benefits programs, click here.

About The Cigna Group

Doing something meaningful starts with a simple decision, a commitment to changing lives. At The Cigna Group, we’re dedicated to improving the health and vitality of those we serve. Through our divisions Cigna Healthcare and Evernorth Health Services, we are committed to enhancing the lives of our clients, customers and patients. Join us in driving growth and improving lives.

Qualified applicants will be considered without regard to race, color, age, disability, sex, childbirth (including pregnancy) or related medical conditions including but not limited to lactation, sexual orientation, gender identity or expression, veteran or military status, religion, national origin, ancestry, marital or familial status, genetic information, status with regard to public assistance, citizenship status or any other characteristic protected by applicable equal employment opportunity laws.

If you require reasonable accommodation in completing the online application process, please email: [email protected] for support. Do not email [email protected] for an update on your application or to provide your resume as you will not receive a response.

The Cigna Group has a tobacco-free policy and reserves the right not to hire tobacco/nicotine users in states where that is legally permissible. Candidates in such states who use tobacco/nicotine will not be considered for employment unless they enter a qualifying smoking cessation program prior to the start of their employment. These states include: Alabama, Alaska, Arizona, Arkansas, Delaware, Florida, Georgia, Hawaii, Idaho, Iowa, Kansas, Maryland, Massachusetts, Michigan, Nebraska, Ohio, Pennsylvania, Texas, Utah, Vermont, and Washington State.

Qualified applicants with criminal histories will be considered for employment in a manner consistent with all federal, state and local ordinances.