Overview In this role you will provide strategic legal counsel on AI/ML development, deployment, and governance, as well as cybersecurity risk management and regulatory compliance. You will partner with IT, risk, and business teams to enable innovation while managing legal risk in a highly regulated global pharmaceutical environment. You will shape AI governance, advise on privacy and data protection implications, and lead technology transaction negotiations. You will engage regulators and industry bodies to align with evolving frameworks, ensuring responsible AI and robust security practices.
Compensation / Benefits- annual bonus
- long-term incentive
- comprehensive benefits package
- medical/dental/vision
- 401(k) retirement plan
- paid holidays and vacation
Responsibilities- Provide strategic legal counsel on design, development, procurement, and deployment of AI/ML systems across research, commercial, and corporate functions.
- Advise on AI governance frameworks including responsible AI principles, algorithmic transparency, bias mitigation, and human oversight for high-risk systems.
- Develop and implement AI governance and risk assessment workflows, including third-party AI due diligence and incident reporting obligations.
- Monitor and interpret global AI regulations (e.g., EU AI Act, FDA AI/ML guidance) and participate in divisional AI committees.
- Lead AI contract negotiations and advise on technology transactions; counsel on data rights for generative AI tools and third-party platforms.
- Serve as primary legal advisor to CISO and IT Risk Management on legal/regulatory matters; support incident response and breach considerations (HIPAA and state laws).
- Advise on cybersecurity regulatory requirements (SEC rules, NIST, industry standards) and vulnerability disclosure practices.
- Provide guidance on cybersecurity policies, vendor assessments, and security provisions in commercial agreements.
- Collaborate with privacy, compliance, and legal teams on intersections of AI, data protection, and cybersecurity; advise on data governance and data-sharing with cybersecurity implications.
- Support M&A, licensing, and collaboration due diligence with AI and cybersecurity considerations; provide training on AI legal risks to stakeholders.
Key requirements- J.D. from an accredited law school; active U.S. state bar membership
- Minimum 10 years of legal experience with at least 5 years in cybersecurity, technology, and/or AI/emerging tech law (preferably in pharma or highly regulated environments)
- Deep understanding of cybersecurity frameworks (HIPAA, GDPR, NIS2, SEC disclosure rules, state breach laws) and AI regulatory frameworks
- Extensive experience managing cybersecurity incident response from a legal perspective
- Experience advising on AI governance, responsible AI, and technology transactions
- Experience drafting/negotiating cybersecurity, data protection, and AI provisions in complex deals (M&A, collaborations, partnerships)
- Proven ability counseling on AI systems from a legal/compliance perspective (risk assessment, transparency, lifecycle governance)
- CIPP/E/US/CIPM, AIGP, or similar AI certifications preferred
- Strategic thinking
- Executive presence and influencing senior leadership
- Clear written and verbal communication; ability to explain complex concepts to non-technical stakeholders
- AI governance and risk assessment
- Regulatory compliance knowledge (HIPAA, GDPR, NIS2, SEC rules)
- Incident response and breach notification coordination
