Assistant General Counsel, Privacy

Job detailsAbout Us:The people of Memorial Sloan Kettering Cancer Center (MSK) are united by a singular mission: ending cancer for life. Our specialized care teams provide personalized, compassionate, expert care to patients of all ages. Informed by basic research done at our Sloan Kettering Institute, scientists across MSK collaborate to conduct innovative translational and clinical research that is driving a revolution in our understanding of cancer as a disease and improving the ability to prevent, diagnose, and treat it. MSK is dedicated to training the next generation of scientists and clinicians, who go on to pursueour missionat MSK and around the globe.Exciting Opportunity at MSK: Help shape the future of global privacy, data governance, and responsible AI at one of the world's leading cancer centers.Memorial Sloan Kettering Cancer Center (MSK) is seeking an experienced privacy attorney to join our Privacy team and help advance a mature, practical, and globally informed privacy program in support of our mission of Ending Cancer for Life.This mid-level attorney position reports to the VP, Privacy Officer & Chief Privacy Counsel, sits within the Compliance Department with a dotted-line relationship to Legal, and advises on sophisticated privacy, digital health, research, AI, and data governance matters across the enterprise.Role Overview:The Assistant General Counsel - Privacy serves as a trusted advisor to clinical, research, technology, compliance, procurement, information security, and business leaders across MSK. You'll provide practical legal guidance on GDPR and other global privacy frameworks, HIPAA, digital health, AI governance, research, vendor relationships, and emerging technologies while helping support responsible innovation throughout the organization.Key Responsibilities: * Advise on U.S. and global privacy and data protection matters involving personal information, protected health information (PHI), and other sensitive data. * Manage and enhance MSK's GDPR compliance program, including data subject rights, DPIAs, ROPAs, cross-border data transfers, privacy-by-design, de-identification, and anonymization. * Partner with clinical, research, IT, digital, procurement, information security, development, marketing, and operational teams to provide practical privacy guidance for strategic initiatives, research, technology implementations, and business operations. * Negotiate and advise on Business Associate Agreements, data protection agreements, vendor contracts, research agreements, and other privacy-related contractual matters. * Draft and maintain privacy notices, policies, procedures, guidance documents, and training materials while supporting digital privacy initiatives and regulatory compliance. * Advise the AI Governance Council and enterprise stakeholders on privacy considerations related to AI-enabled tools, data governance, and responsible innovation. * Monitor evolving U.S. and international privacy laws and translate complex legal requirements into practical, business-focused recommendations. * Collaborate with Legal and Compliance colleagues to strengthen enterprise privacy governance, risk management, documentation, and operational processes.Key Qualifications:Required * Juris Doctor degree. * Licensed to practice law in New York State or eligible for in-house counsel registration. * 5-7 years of privacy or data protection legal experience in a law firm, in-house legal department, healthcare organization, government agency, or comparable environment. * Strong experience advising on GDPR, including global privacy compliance, HIPAA, and U.S. privacy laws, vendor contracting, digital privacy, cookies, trackers and data governance. * Demonstrated ability to provide practical legal advice, negotiate complex agreements, and communicate effectively with multidisciplinary stakeholders.Preferred * Experience supporting healthcare, life sciences, res