Olive’s AI workforce is built to fix our broken healthcare system by addressing healthcare’s most burdensome issues -- delivering hospitals and health systems increased revenue, reduced costs, and increased capacity. People feel lost in the system today and healthcare employees are essentially working in the dark due to outdated technology that creates a lack of shared knowledge and siloed data. Olive is designed to drive connections, shining a new light on the broken healthcare processes that stand between providers and patient care. She uses AI to reveal life-changing insights that make healthcare more efficient, affordable and effective. Olive’s vision is to unleash a trillion dollars of hidden potential within healthcare by connecting its disconnected systems. Olive is improving healthcare operations today, so everyone can benefit from a healthier industry tomorrow.
Job Overview:
The Legal Division at Olive is dedicated to providing top notch service and support to all Olive Divisions and business units. As Olive’s first dedicated privacy counsel and Privacy Officer in Olive’s rapidly growing legal department, the candidate will be uniquely positioned to enhance, create, and lead all privacy initiatives, privacy compliance, and cyber incident response in an incredibly fast-paced environment at a high-growth AIaaS company. The Associate General Counsel, Privacy amp; Privacy Officer’s primary focus will be leading Olive’s HIPAA/state privacy compliance initiatives, so expert knowledge of HIPAA/state privacy laws is essential. Candidates with in-house experience creating and/or leading a privacy program at a healthcare technology company, healthcare system, or a related industry are strongly encouraged to apply.
This role is a great opportunity for someone who is enthusiastic, collaborative in approach, has good judgment, and is able to navigate a high-volume, fast-paced environment with minimal supervision. Olive deploys a flexible, distributed workforce and this position can be located anywhere in the United States. The candidate is expected to be generally available during normal business hours and will report directly to Olive’s General Counsel.
Essential Duties and Responsibilities:
- Serve as the lead attorney on HIPAA, other applicable federal and state healthcare privacy laws or regulations, and other federal/state privacy laws applicable to Olive and/or Olive’s employees
- Serve as Olive’s HIPAA Privacy Officer
- Lead cyber incident investigations and response, in coordination with Olive’s information security team
- Develop and co-lead in coordination with Olive’s information security team Olive’s Information Security amp; Privacy Committee
- Develop and provide training on HIPAA privacy requirements and procedures, in coordination with Olive’s information security team
- Develop and maintain the organization's privacy policies and procedures (external and internal) for HIPAA compliance by performing HIPAA risk assessments and audits, as necessary
- Support Olive’s information security team in maintaining Olive’s HiTrust certification and other applicable privacy/security standards
- Working closely with Olive’s engineering and product teams, create a scalable privacy-by-design framework and perform privacy impact assessments on current and existing Olive products and services, with a specific emphasis on artificial intelligence and machine learning considerations
- Lead review and negotiations of Business Associate Agreements and related data privacy and security agreements
- Assist other Olive attorneys with sales, vendor, and/or partnership contracts on data privacy and protection provisions
- Advise the General Counsel on the impact of proposed privacy law and regulation on business initiatives and employee privacy issues.
- Manage outside counsel on privacy/data security legal matters and privacy vendors, as necessary
- Regular reporting to the General Counsel on privacy initiatives and data security/privacy incidents
Requirements
- Undergraduate and law degrees; active membership in at least one U.S. state bar is required
- 8+ years experience in-house at a healthcare system, a healthcare technology company, or broad law firm experience counseling the same is strongly preferred
- 6+ years experience leading an enterprise-wide privacy program at a healthcare system, healthcare technology company, or related industry is preferred (with strong preference for candidates with experience building a privacy program)
- Contracts or transactional legal experience, with an emphasis on SaaS or AIaaS agreements, is preferred
- Experience at a start-up or high-growth technology company is a big plus
- Exceptional EQ, verbal, and written communication skills
- Ability to