Our team members are at the heart of everything we do. At Cencora, we are united in our responsibility to create healthier futures, and every person here is essential to us being able to deliver on that purpose. If you want to make a difference at the center of health, come join our innovative company and help us improve the lives of people and animals everywhere. Apply today!

Job Details

Cencora is seeking an attorney with significant experience advising and providing strategic leadership in the areas of data governance, privacy and cybersecurity. This role will report to the VP, Data Governance and Regulatory within Cencora’s legal team and focus on enterprise-wide data initiatives and risk mitigation strategies. 

This role requires a dynamic leader who will proactively collaborate with executives at all levels of the organization and offer pragmatic, solution-driven advice while managing risk within the highly regulated healthcare industry.  A successful candidate has the ability to deliver business-oriented, effective and efficient legal services, project management, and strategic counseling on significant projects or matters relating to enterprise data governance and cybersecurity. 

This role will require at least 2 days onsite in our Conshohocken office

PRIMARY DUTIES AND RESPONSIBILITIES: 

• Provide data governance, privacy and cybersecurity legal advice, including strategic guidance around global privacy frameworks, data governance, emerging technologies (including AI), cyber incident response/preparedness, third-party risk management, risk assessment, internal and external audit requests, client/regulatory inquiries, new and existing technologies/offerings, business models and transactions (including mergers and acquisitions), and client-facing communications globally. 

• Monitor the cyber, privacy and emerging technology legal and policy landscape for important updates and advise senior legal and business leaders on such legal developments and policy trends. 

• Assist with the development, application, and enforcement of data governance and information security policies, standards, and procedures to comply with regulatory obligations and contractual requirements. 

• Manage the further development of a global privacy legal team that coordinates across businesses and regions and be an effective manager of direct reports. 

• Provide legal advice and strategic counsel on vulnerability management, application security, identity and access management, and other cybersecurity initiatives. 

• Support the preparation of board reports, executive presentations, regulatory filings, and other legal disclosures to ensure accuracy and completeness of cybersecurity and privacy representations. 

• Support the development and delivery of tabletop exercises and other cybersecurity education and awareness efforts. 

• Establish and maintain strong relationships and lines of communication with business partners, legal personnel and other key stakeholders across the organization.  

EXPERIENCE AND EDUCATIONAL REQUIREMENTS:

A minimum of 9 years of experience as a lawyer combined with expertise in cybersecurity and data governance. Law Degree - must be a graduate of an accredited law school and admitted into the state bar. 

This role is comparable to a counsel, non-equity partner, or service partner in a law firm and is a lawyer who can do sophist