Assistant General Counsel, Privacy at Memorial Sloan Kettering Cancer Center in New York, NY

Job description

• Exciting Opportunity at MSK: Help shape the future of global privacy, data governance, and responsible AI at one of the world's leading cancer centers.
• Memorial Sloan Kettering Cancer Center (MSK) is seeking an experienced privacy attorney to join our Privacy team and help advance a mature, practical, and globally informed privacy program in support of our mission of Ending Cancer for Life.
• This mid-level attorney position reports to the VP, Privacy Officer & Chief Privacy Counsel, sits within the Compliance Department with a dotted-line relationship to Legal, and advises on sophisticated privacy, digital health, research, AI, and data governance matters across the enterprise.
• The Assistant General Counsel – Privacy serves as a trusted advisor to clinical, research, technology, compliance, procurement, information security, and business leaders across MSK. You'll provide practical legal guidance on GDPR and other global privacy frameworks, HIPAA, digital health, AI governance, research, vendor relationships, and emerging technologies while helping support responsible innovation throughout the organization.
• Privacy plays a critical role in advancing patient care, groundbreaking research, digital innovation, and responsible AI at Memorial Sloan Kettering. This position offers the opportunity to influence enterprise privacy strategy while partnering with world-renowned clinicians, researchers, technologists, and executive leaders on some of healthcare's most complex privacy challenges.
• Candidates who meet many, but not every, listed qualification are encouraged to apply. We value intellectual curiosity, sound judgment, practical problem-solving, and the ability to build trusted relationships across a mission-driven organization.

Responsibilities

• Advise on U.S. and global privacy and data protection matters involving personal information, protected health information (PHI), and other sensitive data.
• Manage and enhance MSK's GDPR compliance program, including data subject rights, DPIAs, ROPAs, cross-border data transfers, privacy-by-design, de-identification, and anonymization.
• Partner with clinical, research, IT, digital, procurement, information security, development, marketing, and operational teams to provide practical privacy guidance for strategic initiatives, research, technology implementations, and business operations.
• Negotiate and advise on Business Associate Agreements, data protection agreements, vendor contracts, research agreements, and other privacy-related contractual matters.
• Draft and maintain privacy notices, policies, procedures, guidance documents, and training materials while supporting digital privacy initiatives and regulatory compliance.
• Advise the AI Governance Council and enterprise stakeholders on privacy considerations related to AI-enabled tools, data governance, and responsible innovation.
• Monitor evolving U.S. and international privacy laws and translate complex legal requirements into practical, business-focused recommendations.
• Collaborate with Legal and Compliance colleagues to strengthen enterprise privacy governance, risk management, documentation, and operational processes.

Requirements

• Required
• Juris Doctor degree.
• Licensed to practice law in New York State or eligible for in-house counsel registration.
• 5–7 years of privacy or data protection legal experience in a law firm, in-house legal department, healthcare organization, government agency, or comparable environment.
• Strong experience advising on GDPR, including global privacy compliance, HIPAA, and U.S. privacy laws, vendor contracting, digital privacy, cookies, trackers and data governance.
• Demonstrated ability to provide practical legal advice, negotiate complex agreements, and communicate effectively with multidisciplinary stakeholders.
• Experience supporting healthcare, life sciences, research organizations, hospitals, or academic medical centers.
• Familiarity with human subjects research.
• Experience advising on AI, conducting AI risk assessments.
• Familiarity with TCPA, CAN-SPAM, and consumer privacy laws.
• CIPP/US, CIPP/E, CIPM, AIGP, or similar privacy certification.

Skills

Required

• Juris Doctor degree
• Strong experience advising on GDPR
• Global privacy compliance
• HIPAA
• U.S. privacy laws
• Vendor contracting
• Digital privacy
• Cookies and trackers
• Data governance
• Practical legal advice
• Negotiating complex agreements

Preferred

• Familiarity with human subjects research
• Experience advising on AI
• Conducting AI risk assessments

Benefits

• FSLA Status: Exempt