Assistant General Counsel-Data Privacy

Job Summary

Leidos QTC is seeking an Assistant General Counsel - Data Privacy to serve as a trusted partner to QTC’s lines of business, providing practical legal advice on compliance with contractual and regulatory privacy and data protection requirements. Reporting to the Leidos Deputy General Counsel/Chief Privacy Officer, this position will also partner with the Leidos Health and Civil Sector Counsel Team as well as Human Resources and Information Security. 

Who is Leidos QTC Health Services?

Leidos QTC Health Services collaborates closely with government and non-government customers to address current and future program needs within the health services domain. We specialize in disability-focused medical examinations, independent medical exams and review services, occupational health services, diagnostic testing, and case management solutions. As innovators, we focus on advancing technologies that improve service delivery, with a particular emphasis on enhancing accessibility for examinees in rural communities. With a proven track record of continuous improvement and steady growth, we now handle over 2 million appointments annually. Visit www.qtcm.com for more information.

This is a remote position. Travel may occasionally be required, including to Reston HQ – VA and various Leidos QTC locations.

 

Essential Duties and Responsibilities

• Providing advice on the development and implementation of Leidos QTC’s privacy program to ensure Leidos QTC is compliant with its legal and contractual obligations
• Handling privacy and data protection-related inquiries from a wide range of stakeholders across Leidos QTC and providing actionable advice and legal counsel on privacy questions
• Reviewing and providing advice on novel and emerging Leidos QTC business opportunities from a privacy perspective
• Reviewing, drafting and negotiating privacy and data protection terms in various types of agreements (e.g., vendor/service provider agreements, customer agreements, data processing and data usage agreements, Business Associate Agreements)
• Reviewing, drafting and updating policies, procedures, and notices addressing the handling of personal information
• Conducting data privacy impact assessments on projects, products, systems, and emerging technologies to identify potential privacy risks and provide recommendations for risk mitigation
• Providing privacy third party contracting oversight to ensure consistency and alignment with all current and future privacy laws and regulations to minimize future privacy risks to Leidos QTC
• Collaborating with the incident response teams to manage security incidents, including investigation, reporting, and remediation in accordance with Leidos policy and regulatory requirements
• Developing guidelines, training, and tools to support accountability and compliance across Leidos QTC
• Monitoring relevant legislative developments, regulatory guidance, and enforcement actions relating to privacy and data protection in the jurisdictions in which Leidos QTC operates

 

Competencies:

• Superior written and verbal communication skills
• Excellent organizational skills
• Agility and willingness to work on a broad range of matters
• Self-motivated and ability to work independently without extensive supervision
• Ability to translate legal requirements into practical guidance for non-lawyers
• Interpersonal and collaborative mindset

 

Education and/or Experience: (includes certificate & licenses)

• Juris Doctor from a U.S. accredited law school
• Minimum of 8 years of experience advising on privacy/data protection compliance requirements
• Knowledge of and familiarity with global privacy and data protection laws, regulations and standards, including the Health Insurance Portability and Accountability Act, the California Privacy Rights Act, the U.S. Privacy Act, and state breach notification laws
• Experience advising clients on compliance with HIPAA, other health privacy laws, and related legal frameworks
• Demonstrated transactional experience, including reviewing, drafting and negotiating privacy and data protection contract terms and agreements, such as Business Associate Agreements and data protection agreements
• Experience in the health care industry and advising health care clients is a plus
• Demonstrated experience with data breach management and mitigation

 

Pay and Benefits:

Salary Range: $185,000 - $225,000 w/ up to 9% bonus eligibility

 

Pay and benefits are fundamental to any career decision. That's why we craft compensation packages that reflect the importance of the work we do for our customers. As a result, we offer meaningful and engaging careers to support you and your career goals, all while nurturing a healthy work-life balance. Employment benefits include competitive compensation, Health and Wellness programs, Income Protection, Paid Leave and Retirement. More details are available here: Join Our Team | Jobs & Career Opportunities | Leidos QTC Health Services (qtcm.com)

The Leidos QTC Health Services pay range for this job level is a general guideline only and not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to): geographic location, responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law.

Leidos QTC Health Services. is a VEVRAA Federal contractor and an Equal Opportunity Employer. The company has an ongoing commitment to affirmative action and the creation of a workplace free of discrimination, harassment and retaliation. The company recruits, hires, trains, and promotes individuals in all job titles without regard to race, color, creed, religion, ancestry, national origin, age, sex, pregnancy, sexual orientation, gender identity, genetic information, people with disabilities protected under law, and protected veteran status.

* This job description supersedes all prior job descriptions and is intended to describe the general content and essential requirements for the position listed above. It is not to be construed as an exhaustive statement of requirements, duties and responsibilities. Management reserves the right to add or change the duties of this position as required at any time.