Senior Counsel - Data Governance, Privacy and CyberSecurity ...

Senior Counsel - Data Governance, Privacy and CyberSecurity Senior Counsel - Data Governance, Privacy and CyberSecurity Apply locations Woking, United Kingdom time type Full timeposted on Posted Yesterday job requisition id R257806 Our teammembers are at the heart of everything we do. At Cencora, we areunited in our responsibility to create healthier futures, and everyperson here is essential to us being able to deliver on thatpurpose. If you want to make a difference at the center of health,come join our innovative company and help us improve the lives ofpeople and animals everywhere. Apply today! Job Details PositionSummary Cencora seeks an attorney with significant experience inthe areas of data governance, privacy, cybersecurity, and emergingartificial intelligence issues to provide strategic legal advice inaddressing Cencora’s data risk management and innovationpriorities. This role will report to the Assistant General Counsel- Data Governance, Privacy, and Cybersecurity and will collaboratewith other legal, business, and functional teams across theenterprise. While part of a global team, this particular role willalso require expertise in and frequent counseling with regards toEU, UK, Swiss, and Asia-Pacific privacy, cybersecurity, and AIlaws, regulations, and guidance. This position thus requires alawyer with strong analytical skills and the ability to deliverbusiness-oriented, pragmatic, and efficient legal services in afast-paced, changing technology environment. The successfulcandidate will also have strong prioritization and projectmanagement skills. This suite of skills includes the ability toprovide strategic insights to compliance partners tasked withoperationalizing privacy and cybersecurity compliance along withdeveloping governance mechanisms for emerging areas of data andtechnology law. PRIMARY DUTIES AND RESPONSIBILITIES: - Adviseclients on complex legal, regulatory, and policy questions in theareas of data privacy and protection (particularly GDPR, Swissprivacy laws, UK privacy laws, Asia-Pacific privacy laws),cybersecurity (e.g., NIS2), and artificial intelligence (includingthe EU AI Act). - Draft, review, and/or negotiate variouscontracts, particularly data processing agreements and contractprovisions dealing with privacy, cybersecurity, AI, and other dataprotection and operational continuity issues. This work alsoenvisions creating template agreements and associated playbooks toexpedite contracting issue management in privacy, cyber, and AI lawarenas. - Assess and help mitigate harms associated with privacyand cybersecurity incidents through clear communication,disciplined issue escalation, and partnership with other privacy,cybersecurity, and business stakeholders. - Conduct reviews of newcustomer- and/or vendor- related technology proposals entailingprivacy, cyber, and/or AI risks and offer pragmatic, creativesolutions reflecting privacy and security by design concepts. -Demonstrate strong and calm decision-making capability andcommunication skills in the midst of time-sensitive incidents orhigh-risk business proposals requiring escalation to senior levelsof leadership. - Manage competing projects and reviews withagility, effectively multi-tasking and prioritizing work to ensurethat high value and/or high-risk business needs and projects areaddressed in an efficient and strategically streamlined way.Experience and Education Requirements A minimum of 5-7 years ofexperience as a lawyer, combined with expertise and incybersecurity and privacy/data governance. Prior in-houseexperience and cross-functional collaboration with multi-nationalcompany/companies is preferred. Additionally, substantial legalwork with or for healthcare companies is also ideal. Must be agraduate of a reputable solicitor/lawyer program and be a qualifiedsolicitor or equivalent from another jurisdiction. Minimum Skills,Knowledge and Ability Requirements - Familiarity with a variety ofprivacy, cybersecurity, emerging AI and related laws andregulations (including cyber disclosures to other regulatory bodiessuch as the SEC), across multiple EU countries and otherjurisdictions. Knowledge of healthcare-specific laws, regulations,guidance and applications also a plus. - Ability to capture andcommunicate consistent themes across jurisdictions for pragmaticrisk management counseling to relevant business partners whenworking on multi-country technology launches or businessinvestments. - Facility in managing outside counsel and liaisingwith other experts engaged to work on matters for Cencora,including specialists from major law firms, consulting agencies,and forensics experts. - Capable of readily grasping existing andnew business models and technology trends and of marrying existinglegal requirements and anticipated future regulatory developmentswith business strategy to help “future proof” Cencora’s businessinvestments. - Experience in advising and presenting to all levelsof business management, including senior leadership, with cleardistillations of risk, potential impacts, possible solutions, andrisk mitigation strategies. - Strong soft skills, particularlywhile handling incident management and risk escalation issues –i.e., projecting calm and confidence to business partners andleadership in time-sensitive and elevated risk scenarios. -Experience collaborating with compliance professionals, advising onhighest priority compliance requirements, and helping to defineoperational targets through ongoing partnership, feedback, andclear communication skills. - Possession of one or more privacy,AI, and/or information security certifications (CIPP, CIPM, AIGP,CIPT, CISSP) (preferred). - Excellent negotiating, prioritization,multi-tasking, juggling, and client management andexpectation-setting skills – including forging and managing strongrelationships to ease conflict when new projects/issue managementscenarios take priority over existing matters. - Fluency in Englishrequired; additional fluency in German, French, or Spanish would behighly advantageous. What Cencora offers Benefit offerings outsidethe US may vary by country and will be aligned to local marketpractice. The eligibility and effective date may differ for somebenefits and for team members covered under collective bargainingagreements. Affiliated Companies Affiliated Companies: AllianceHealthcare Management Services Limited Equal Employment OpportunityCencora is committed to providing equal employment opportunitywithout regard to race, color, religion, sex, sexual orientation,gender identity, genetic information, national origin, age,disability, veteran status or membership in any other classprotected by federal, state or local law. The company’s continuedsuccess depends on the full and effective utilization of qualifiedindividuals. Therefore, harassment is prohibited and all mattersrelated to recruiting, training, compensation, benefits, promotionsand transfers comply with equal opportunity principles and arenon-discriminatory. Cencora is committed to providing reasonableaccommodations to individuals with disabilities during theemployment process which are consistent with legal requirements. Ifyou wish to request an accommodation while seeking employment,please call 888.692.2272 or email . We will makeaccommodation determinations on a request-by-request basis.Messages and emails regarding anything other than accommodationsrequests will not be returned. #J-18808-Ljbffr