Assistant General Counsel, Privacy

The people of Memorial Sloan Kettering Cancer Center (MSK) are united by a singular mission: ending cancer for life. Our specialized care teams provide personalized, compassionate, expert care to patients of all ages. Informed by basic research done at our Sloan Kettering Institute, scientists across MSK collaborate to conduct innovative translational and clinical research that is driving a revolution in our understanding of cancer as a disease and improving the ability to prevent, diagnose, and treat it. MSK is dedicated to training the next generation of scientists and clinicians, who go on to pursue our mission at MSK and around the globe.

Exciting Opportunity at MSK: Help shape the future of global privacy, data governance, and responsible AI at one of the world's leading cancer centers.

Memorial Sloan Kettering Cancer Center (MSK) is seeking an experienced privacy attorney to join our Privacy team and help advance a mature, practical, and globally informed privacy program in support of our mission of Ending Cancer for Life.

This mid-level attorney position reports to the VP, Privacy Officer & Chief Privacy Counsel, sits within the Compliance Department with a dotted-line relationship to Legal, and advises on sophisticated privacy, digital health, research, AI, and data governance matters across the enterprise.

Role Overview:

The Assistant General Counsel – Privacy serves as a trusted advisor to clinical, research, technology, compliance, procurement, information security, and business leaders across MSK. You'll provide practical legal guidance on GDPR and other global privacy frameworks, HIPAA, digital health, AI governance, research, vendor relationships, and emerging technologies while helping support responsible innovation throughout the organization.

Key Responsibilities:

• Advise on U.S. and global privacy and data protection matters involving personal information, protected health information (PHI), and other sensitive data.

• Manage and enhance MSK's GDPR compliance program, including data subject rights, DPIAs, ROPAs, cross-border data transfers, privacy-by-design, de-identification, and anonymization.

• Partner with clinical, research, IT, digital, procurement, information security, development, marketing, and operational teams to provide practical privacy guidance for strategic initiatives, research, technology implementations, and business operations.

• Negotiate and advise on Business Associate Agreements, data protection agreements, vendor contracts, research agreements, and other privacy-related contractual matters.

• Draft and maintain privacy notices, policies, procedures, guidance documents, and training materials while supporting digital privacy initiatives and regulatory compliance.

• Advise the AI Governance Council and enterprise stakeholders on privacy considerations related to AI-enabled tools, data governance, and responsible innovation.

• Monitor evolving U.S. and international privacy laws and translate complex legal requirements into practical, business-focused recommendations.

• Collaborate with Legal and Compliance colleagues to strengthen enterprise privacy governance, risk management, documentation, and operational processes.

Key Qualifications:

Required

• Juris Doctor degree.

• Licensed to practice law in New York State or eligible for in-house counsel registration.

• 5–7 years of privacy or data protection legal experience in a law firm, in-house legal department, healthcare organization, government agency, or comparable environment.

• Strong experience advising on GDPR, including global privacy compliance, HIPAA, and U.S. privacy laws, vendor contracting, digital privacy, cookies, trackers and data governance.

• Demonstrated ability to provide practical legal advice, negotiate complex agreements, and communicate effectively with multidisciplinary stakeholders.

Preferred

• Experience supporting healthcare, life sciences, research organizations, hospitals, or academic medical centers.

• Familiarity with human subjects research.

• Experience advising on AI, conducting AI risk assessments.

• Familiarity with TCPA, CAN-SPAM, and consumer privacy laws.

• CIPP/US, CIPP/E, CIPM, AIGP, or similar privacy certification.

Additional Information:

• Report directly to the VP, Privacy Officer & Chief Privacy Counsel.

• Location: 633 Third Avenue, New York, NY; Flexibility to travel to other local sites as needed

• Hybrid (approximately one day per week onsite)

Why Join MSK?

Privacy plays a critical role in advancing patient care, groundbreaking research, digital innovation, and responsible AI at Memorial Sloan Kettering. This position offers the opportunity to influence enterprise privacy strategy while partnering with world-renowned clinicians, researchers, technologists, and executive leaders on some of healthcare's most complex privacy challenges.

Candidates who meet many, but not every, listed qualification are encouraged to apply. We value intellectual curiosity, sound judgment, practical problem-solving, and the ability to build trusted relationships across a mission-driven organization.

Helpful Links:

• Compensation Philosophy

• Benefits

Closing:

At MSK, we believe in fair, competitive pay that reflects your job, experience, and skills.

MSK is an equal opportunity and affirmative action employer committed to diversity and inclusion in all aspects of recruiting and employment. All qualified individuals are encouraged to apply and will receive consideration without regard to race, color, gender, gender identity or expression, sexual orientation, national origin, age, religion, creed, disability, veteran status or any other factor which cannot lawfully be used as a basis for an employment decision.  

Federal law requires employers to provide reasonable accommodation to qualified individuals with disabilities. Please tell us if you require a reasonable accommodation to apply for a job or to perform your job. Examples of reasonable accommodation include making a change to the application process or work procedures, providing documents in an alternate format, using a sign language interpreter, or using specialized equipment.