Closing Date: 30th October, 2026

Description:

About the role:
As a Senior US Privacy Counsel, you will drive impactful contributions and focus on outcomes. You will support Cognizant's US and Americas business, collaborating with business units, legal teams, product and engineering teams, security, communications, executive leadership, and external stakeholders. You will provide authoritative advice on privacy, data protection, digital laws, and regulatory compliance while helping enable business growth.

You will have the autonomy to lead, innovate, and improve workflows while upholding our commitment to quality and continuous learning. As part of a team of self-starters, you can work with impact alongside our vibrant people and culture while enjoying unmatched learning opportunities.

In this role, you will:

Provide authoritative legal counsel on US federal and state privacy laws, including HIPAA, HITECH, 42 CFR Part 2, CCPA, CPRA, and comprehensive privacy laws in Texas, Virginia, Colorado, Connecticut, and other states. Monitor and advise on emerging federal privacy and related AI legislation.
Support the negotiation and drafting of business associate agreements, data processing agreements, and data use agreements. Maintain and update contracting playbooks for privacy and data-security terms in master services agreements and vendor agreements.
Partner with product and engineering teams to implement privacy-by-design across products and solutions, including reviewing data flows, consent frameworks, and de-identification methodologies.
Lead privacy-incident response, including notification analysis under the HIPAA Breach Notification Rule and applicable state breach-notification laws. Coordinate incident management with security, communications, executive leadership, and other stakeholders.
Develop and maintain privacy policies, procedures, compliance documentation, training, and awareness initiatives. Manage regulatory inquiries and enforcement matters involving HHS/OCR, the FTC, and state attorneys general, and represent the company in audits, investigations, and complaint responses.
Embrace our vibrant culture by striving for excellence, focusing on meaningful outcomes, and collaborating effectively. Prioritize quality, stay curious, and commit to continuous learning. Take ownership, build relationships, and focus on personal growth to drive business strategy, create unmatched career opportunities, and deliver impactful work.

What you must have to be considered

A J.D. from an accredited US law school and active bar membership in at least one US state.
Seven or more years of experience in privacy and data protection, including significant in-house experience at a technology company.
Deep command of US health privacy and security law, including HIPAA, HITECH, 42 CFR Part 2, and state comprehensive privacy statutes.
Experience drafting and negotiating privacy clauses in complex agreements.
Excellent communication and stakeholder-management skills.
The ability to balance legal risk with commercial objectives and work independently in a fast-paced environment.
A strong sense of ownership, a desire to create meaningful outcomes, and a passion for work that serves a greater good for customers, communities, or global challenges.
The embodiment of Cognizant's values: Work as One, Dare to Innovate, Raise the Bar, Do the Right Thing, and Own It.

These will help you succeed

Law firm experience in a health IT or privacy practice.
Working familiarity with EU and UK GDPR requirements relevant to global business-to-business operations.
CIPP/US certification.
CHPC certification or CIPM certification.

Work model
We believe hybrid work is the way forward as we strive to provide flexibility wherever possible. Based on this role's business requirements, this is a hybrid position requiring 3 days a week in a Cognizant office. Regardless of your working arrangement, we are here to support a healthy work-life balance though our various wellbeing programs.

The working arrangements for this role are accurate as of the date of posting. This may change based on the project you're engaged in, as well as business and client requirements. Rest assured; we will always be clear about role expectations.

We're excited to meet people who share our mission and can make an impact in a variety of ways. Don't hesitate to apply, even if you only meet the minimum requirements listed. Think about your transferable experiences and unique skills that make you stand out as someone who can bring new and exciting things to this role.