Special Counsel – Health Law & Corporate (Data Privacy & Cybersecurity)

A leading Am Law 100 firm is seeking a Special Counsel to join its Health Law and Corporate sections in a shared, cross-disciplinary role focused on data privacy, cybersecurity, AI, and digital health. The position carries a target allocation of approximately 60% Health Law and 40% Corporate, and is open in a primary office with two secondary locations available.

The firm's health law practice advises providers, payors, pharmacy benefit managers, manufacturers, distributors, and suppliers across transactional, regulatory, and litigation matters. Its corporate privacy and cybersecurity team counsels clients on global privacy and data protection regimes, AI governance, incident response readiness, vendor and supply chain risk, and the integration of privacy and security considerations into product development and technology procurement.

The successful candidate will operate at a senior level, managing sophisticated workstreams independently while collaborating with partners, associates, clients, and cross-disciplinary teams across both counseling and transactional contexts, including M&A and private equity due diligence and deal-term drafting.

• JD or LLM from an ABA-accredited law school.
• Admitted to or eligible for admission to the MA, NY, or DC Bar.
• 6+ years of relevant experience in privacy, cybersecurity, AI, digital health, health care regulatory, and/or transactional technology or data matters.
• Familiarity with HIPAA and major privacy/data protection frameworks (e.g., CCPA/CPRA, GDPR, GLBA, COPPA, BIPA, CAN-SPAM, TCPA); experience or strong interest in AI regulatory developments and emerging AI governance frameworks preferred.
• Experience with privacy and cybersecurity aspects of M&A and private equity transactions, including diligence, risk assessment, and negotiation of data-related deal terms.
• Experience negotiating privacy, security, and data-related terms in commercial technology agreements.
• Interest in or experience with cybersecurity risk management, incident response planning, vendor risk assessment, and security governance.
• CIPP or other IAPP certifications a plus.
• Excellent written and verbal communication skills, strong judgment, and the ability to prioritize and manage competing responsibilities in a team setting.