Assistant General Counsel, Privacy

Assistant General Counsel, Privacy

About Memorial Sloan Kettering Cancer Center

The people of Memorial Sloan Kettering Cancer Center (MSK) are united by a singular mission: ending cancer for life.

Our specialized care teams provide personalized, compassionate, expert care to patients of all ages. Informed by basic research conducted at the Sloan Kettering Institute, scientists across MSK collaborate on innovative translational and clinical research that is advancing our understanding of cancer and improving the ability to prevent, diagnose, and treat the disease.

MSK is also dedicated to training the next generation of scientists and clinicians, who go on to pursue this mission at MSK and around the world.

Exciting Opportunity at MSK

MSK's Privacy team is committed to safeguarding the privacy of our patients' information and promoting the highest standards of ethics and integrity in everything we do.

Working closely with colleagues across the enterprise, the Privacy team helps MSK achieve its mission of Ending Cancer for Life.

MSK is seeking an experienced Assistant General Counsel, Privacy to advise internal clients on privacy law and policy, support enterprise strategic initiatives, clinical and business operations, and research matters, and manage operational compliance with GDPR and related global privacy frameworks.

Role Overview

The Assistant General Counsel, Privacy will:

• Serve as a subject matter expert to business, clinical, and research teams across MSK, providing timely and practical legal guidance on privacy matters.

• Conduct detailed legal research and advise internal clients on complex privacy and data protection questions.

• Manage MSK's operational compliance with GDPR and other global privacy frameworks.

• Advise other members of the MSK legal team on data privacy laws and collaborate on transactions led by those attorneys.

• Lead negotiations of HIPAA Business Associate Agreements (BAAs) with MSK's IT and supply chain vendors.

• Draft, update, and regularly review consumer-facing privacy notices for MSK digital properties.

• Advise Development, Marketing and Communications, and other digital teams on the use of cookies, pixels, and other tracking technologies.

• Provide legal guidance to members of the Compliance team regarding privacy-related inquiries from patients and staff.

• Collaborate with clinical, research, hospital administration, IT, procurement, Information Security, and other departments, as well as MSK's AI Governance Council, to develop and enhance policies governing the use of personal data, including PHI and PII.

• Monitor emerging domestic and global privacy and data protection requirements and assess their impact on MSK's operations and strategic plans.

Key Qualifications

Successful candidates will bring:

• Significant experience advising clients on GDPR and other global privacy frameworks, along with experience involving HIPAA and state privacy laws governing health information.

• Demonstrated knowledge of U.S. privacy and data protection laws, including the rapidly evolving landscape of comprehensive state privacy legislation.

• Experience implementing the practical requirements of privacy laws, including individual data subject rights, de-identification, and data anonymization.

• Strong understanding of technology, marketing technology, advertising technology, and emerging AI technologies.

• Experience advising clients on trackers, pixels, digital consumer privacy, and consumer protection requirements, including TCPA and CAN-SPAM.

• Familiarity with regulatory requirements governing Human Subjects Research, preferred.

• A demonstrated ability to translate regulatory requirements into practical, effective solutions that support organizational strategy.

• The ability to navigate complex organizational dynamics involving policy, processes, and people.

• A Juris Doctor (JD) and a minimum of five years of direct experience advising clients on privacy law, either at a law firm or as part of an in-house legal or compliance team.

• Admission to practice law in New York State, or eligibility for in-house registration.

Core Skills

Privacy & Regulatory Compliance

Deep knowledge of HIPAA, GDPR, and global privacy frameworks, with the ability to support organizational compliance and mitigate legal risk.

Legal Research & Advisory

Ability to conduct thorough legal research and provide timely, practical guidance on complex privacy and data protection matters.

Contract Negotiation & Vendor Management

Experience leading Business Associate Agreement negotiations and working with vendors on privacy and data security requirements.

Cross-Functional Collaboration

Proven ability to partner effectively with clinical, research, IT, compliance, procurement, information security, and legal teams to develop privacy-focused policies and solutions.

Data Governance & Digital Privacy Strategy

Expertise in PHI and PII governance, privacy notices, cookies and tracking technologies, de-identification methodologies, and assessing the impact of evolving privacy regulations on business operations.

Additional Information

• Reports to: VP, Privacy Officer & Chief Privacy Counsel

• Location: 633 Third Avenue

• Work Arrangement: Hybrid, with flexibility to travel to other MSK sites as needed

• FLSA Status: Exempt

• Pay Range: $137,500 - $227,000

Helpful Links

• Compensation Philosophy

• Benefits

Compensation & Equal Opportunity

At MSK, we believe in fair, competitive compensation that reflects the responsibilities of the position, as well as each candidate's experience and skills.

Memorial Sloan Kettering Cancer Center is an equal opportunity and affirmative action employer committed to diversity and inclusion in all aspects of recruiting and employment. All qualified individuals are encouraged to apply and will receive consideration without regard to race, color, gender, gender identity or expression, sexual orientation, national origin, age, religion, creed, disability, veteran status, or any other factor that cannot lawfully be used as the basis for an employment decision.

Federal law requires employers to provide reasonable accommodations to qualified individuals with disabilities. Applicants who require a reasonable accommodation to apply for a position or perform the essential functions of the job are encouraged to make that need known.

Reasonable accommodations may include changes to the application process or work procedures, documents in alternative formats, sign language interpretation, or specialized equipment.