International Privacy and Product, Associate General Counsel

About Lyra HealthLyra is transforming mental health care through technology with a human touch to help people feel emotionally healthy at work and at home. We work with industry leaders, such as Morgan Stanley, Uber, Amgen, and other Fortune 500 companies, to improve access to effective, high-quality mental health care for their employees and their families. With our innovative digital care platform and global provider network, 10 million people can receive the best care and feel better, faster. Founded by David Ebersman, former CFO of Facebook and Genentech, Lyra has raised more than $900 million.
About the RoleYou will be a critical team member in Lyra’s growing legal and compliance team to support internal and external stakeholders in fulfilling Lyra’s mission to bring mental and emotional health solutions to large employers across the country and internationally. This is a full-time remote role that can be located in the US (Eastern Time Zone preferred) and will report to Lyra’s General Counsel. 
You will be an integral part of a cross-functional legal and compliance team that works to ensure our business’ compliance with applicable data privacy laws and regulations. The position supports an increasing demand for both legal and operational advice and guidance from our internal stakeholders.  This role will work closely with other departments within the company to advise on a wide range of privacy issues implicated in the development of our technology services and the delivery of our clinical care services across multiple jurisdictions.  You will be expected to work independently as the primary point of contact for the legal team in responding to international privacy and product questions, helping to develop the strategy for our international privacy program, and leading projects to support Lyra’s growth.
 The ideal candidate will be an experienced attorney, ready to roll up their sleeves on novel questions of privacy law, able to deliver practical advice to our operational and tech teams on international regulations in privacy and other areas, and prepared to support teams across multiple time zones.  You are an attorney with a proactive nature in identifying issues and presenting solutions and someone who is searching for a collaborative environment brimming with novel questions.

Responsibilities

• Support Lyra’s product expansion to international jurisdictions, by identifying and assessing global privacy requirements; partner with our legal and compliance subject matter experts to issue spot other regulatory requirements for clinical service delivery, compliance concerns, and intellectual property issues
• Provide practical and solution focused legal advice and support on business matters in a fast-paced environment
• Work cross-functionally with the legal team and other business units to advise on relevant issues to Lyra’s international services including advice concerning applicable data protection law and impact on existing company contracts
• Collaborate with internal and external experts to ensure that commercial agreements appropriately manage risk and comply with policies, laws, rules, regulations, and company objectives
• Develop standards, guidance and procedures to ensure data privacy compliance requirements and recommendations are addressed throughout product and information lifecycles
• Assist with reviewing, drafting and/or negotiating privacy-related agreements, including Business Associate Agreements, Data Processing Agreements, Standard Contractual Clauses, and various consents
• Communicate legal and regulatory privacy requirements to business partners
• Support Company wide training and development on key areas of international data protection and privacy requirements
• Develop and maintain internal and external privacy policies, procedures, and guidance documentation
• Direct, develop, guide, and continuously improve the effectiveness of Lyra’s global privacy compliance program to meet regulatory, legal and company privacy obligations, including:  Conduct privacy and data protection impact assessments of programs, systems, products, and services
• Maintain data inventories and records to track Lyra’s processing (e.g., Records of processing and lawful basis ) of personal information
• Oversee processes for reviewing and responding to individuals’ data-related requests
• Develop and maintain practical incident response policies and procedures and investigate and direct the company’s response to any privacy/security incidents in partnership with the Lyra’s Security team
• Investigates and directs the company’s response to any inquiries and complaints received about privacy/security in partnership with the Lyra’s Security Team
• Establishes strong working relationships with key business leaders and plays a key role in raising awareness of privacy issues and communicating the