Corporate Counsel III (Privacy, Digital Risk, and AI Governance)

Corporate Counsel III (Privacy, Digital Risk, and AI Governance)

What you will be doing:

Working as part of Premier's Privacy Office, the Corporate Counsel III (Privacy, Digital Risk, and AI Governance) advises Premier on compliance with applicable privacy, AI, and digital laws, regulations, and industry frameworks, including U.S. state privacy and AI laws, HIPAA and HITECH, the EU AI Act, and the NIST AI Risk Management Framework.

This position will serve as the team’s principal legal specialist for AI regulatory compliance, while partnering with the Corporate Counsel III (Privacy, Digital Risk, and Cybersecurity) on privacy compliance and digital risk oversight. The attorney will provide practical, risk-based guidance to Premier’s business teams, AI & Data Analytics organization, and Legal team.

This role will partner cross-functionally to continuously improve, operationalize, and evolve Premier’s privacy, AI, and digital governance programs. The attorney will work closely with the AI & Data Analytics, Technology, Security, and business teams to translate applicable regulatory requirements into practical, scalable processes and controls supporting privacy and AI impact assessments, AI use-case review and classification, AI governance, online privacy and digital compliance, and specialized privacy and AI contract negotiations. The attorney will also monitor evolving privacy, AI, and digital legal requirements and advise relevant stakeholders on their impact.

The ideal candidate is a highly proactive, business-minded attorney who enjoys building and evolving governance programs and processes, works well independently and collaboratively, and provides clear, decisive recommendations. The candidate should thrive in a fast-paced, complex environment and collaborate effectively with senior management, AI and data teams, Technology, business teams, vendors, customers, and outside counsel.

Key Responsibilities

Responsibility #1– 100%

· Support Premier’s regulatory compliance with applicable privacy and AI laws and related industry frameworks, including proactively monitoring and interpreting developing laws, regulations, and frameworks.

• •Support Premier's regulatory compliance with applicable privacy and AI laws and related industry frameworks, including proactively monitoring and interpreting developing laws, regulations and gf
• •Provide legal oversight and guidance regarding Premier’s digital compliance risks, including website and application terms & conditions, online tracking technologies, digital accessibility requirements, digital asset disclosures, and employee data access policies.
• •Support enterprise innovation and growth by incorporating privacy, AI, and digital compliance-by-design principles from the outset of applicable initiatives.
• •Conduct enterprise legal risk reviews across privacy, AI, and digital matters, including privacy and AI impact assessments, data subject rights requests, supplier privacy reviews, and legal review and classification of AI use cases.
• •Contribute to continued modernization and development of Premier’s Digital & Data Legal and Governance organization, digital & data policies and procedures, and overall risk governance framework across privacy, AI, and digital matters.
• •Provide legal counsel regarding privacy- and AI-related incidents, investigations, mitigation and response activities, regulatory reporting, and regulatory inquiries, partnering with internal stakeholders and external parties as needed.
• •Serve the AI & Data Analytics Office and Legal as a primary legal specialist across privacy, AI, and digital regulatory compliance and risk. Maintain related policies and contract templates, and advise on specialized or complex privacy, AI, and digital matters requiring subject-matter expertise.

​Required Qualifications

Work Experience:

Years of Applicable Experience - 7 or more years Education:

Juris Doctorate (Required)

Required Certifications/Licensing

Active license in good standing to practice law in at least one U.S. jurisdiction, with eligibility to serve as in-house counsel as required.

Preferred Qualifications

Skills:

• •One or more relevant privacy or AI governance certifications, such as CIPP/US, CIPP/E, CIPM, CIPT, or AIGP.
• •Experience operationalizing privacy, AI, and digital risk programs and related processes.
• •Familiarity with OneTrust, Transcend, or similar privacy or AI governance platforms.

Experience:

• •At least 5 years of relevant legal experience, preferably 5 to 7 or more years, advising on privacy, AI, digital compliance, technology, or related regulatory matters in a law firm, in-house legal department, government agency, or comparable environment.
• •Substantive knowledge of U.S. privacy and data protection laws, including HIPAA and HITECH, state comprehensive privacy laws, state consumer health data laws, and other requirements governing the collection, use, disclosure, retention, and protection of personal information.
• •Demonstrated experience interpreting AI laws, regulations, and recognized AI governance frameworks, including U.S. federal and state requirements, the EU AI Act, and the NIST AI Risk Management Framework, and translating those requirements into practical guidance for AI, data, Technology, compliance, and business teams.
• •Experience advising on the development, procurement, deployment, and use of AI systems, identifying the organization’s regulatory role as a provider, deployer, or other regulated participant, evaluating prohibited, high-risk, or consequential decision-related use cases, addressing transparency and human oversight requirements, and supporting related documentation and governance processes.
• •Hands-on experience conducting or providing legal oversight for privacy, AI, and digital risk assessments, including privacy and AI impact assessments, records of processing activities, data subject request workflows, AI use-case intake and classification, supplier privacy reviews, and assessments of new products, technologies, data uses, or business initiatives.
• •Experience advising business, product, technology, AI, and data stakeholders during the design or implementation of new products, services, systems, vendors, and AI use cases, with the ability to identify applicable requirements early and recommend practical controls or risk mitigations.
• •Experience advising on digital compliance matters, including website and application privacy disclosures, online tracking technologies, cookies and consent requirements, digital terms and conditions, consumer-facing data practices, and accessibility-related legal requirements.
• •Experience drafting, reviewing, and negotiating specialized or complex privacy, AI, and technology provisions in commercial agreements, including data processing agreements, business associate agreements, and nonstandard AI provisions addressing matters such as permitted data and model uses, complex training restrictions, transparency, human oversight, monitoring, and regulatory allocation of responsibility.
• •Experience developing, implementing, or materially improving privacy, AI, or digital governance programs, including policies, standards, procedures, assessment methodologies, inventories, templates, decision records, escalation protocols, training materials, and compliance workflows.

Education:

Juris Doctorate

Additional Job Requirements:

Remain in a stationary position for prolonged periods of time

Be adaptive and change priorities quickly; meet deadlines

Attention to detail

Operate computer programs and software

Ability to communicate effectively with audiences in person and in electronic formats .

Day-to-day contact with others (co-workers and/or the public)

Making independent decisions

Ability to work in a collaborative business environment in close quarters with peers and varying interruptions

Working Conditions: Remote

Travel Requirements: Travel 1-20% within the US

Physical D