HealthEquity · 9 hours ago
Associate General Counsel, Privacy & Security
United States
Full-time
Remote
Senior Level, Lead/Staff
$203K/yr - $268K/yr
10+ years expHealthEquity is dedicated to saving and improving lives by empowering healthcare consumers. The Associate General Counsel, Privacy & Security will advise on U.S. privacy law, cybersecurity, and emerging technologies, guiding data protection strategies and compliance efforts while shaping legal strategy for new products and AI applications.
Financial ServicesHealth CarePayments
Responsibilities
Advise on data protection strategies and regulatory requirements
Guide breach response efforts and support the Privacy team in embedding privacy-by-design principles into business operations
Strengthen governance frameworks for data and AI risk management
Advise on complex U.S. privacy and data protection laws (GLBA, HIPAA, CCPA/CPRA, etc.) across business functions
Lead legal reviews of products and features to integrate privacy-by-design principles throughout development lifecycles
Draft, review, and negotiate agreements related to privacy, data protection, and data use
Assess legal risk in AI initiatives, participate in AI governance, and recommend safeguards for compliance
Contribute to enterprise policies and frameworks for security, privacy, and AI aligned with company values
Monitor regulatory developments impacting privacy, data use, and AI
Identify privacy and data protection risks and advise leadership on mitigation strategies
Provide counsel on incident management, remediation, and regulatory inquiries at state, federal, and international levels
Translate emerging privacy, cybersecurity, and data protection laws into actionable guidance
Support development and maintenance of policies for privacy, cybersecurity, AI, and data protection
Partner with privacy, security, and engineering teams to align legal obligations with operational practices
Interpret and apply agency rules, legislation, and industry best practices to AI use cases
Qualification
Required
J.D. from an ABA-accredited law school; active license in at least one U.S. jurisdiction
10+ years of experience advising on privacy and data protection in a top law firm or in-house
Deep expertise in HIPAA, GLBA, and state privacy laws (CCPA/CPRA)
Proven experience advising senior leadership, including C-suite and boards, on privacy, security, and risk management
Strong background in privacy risk assessments, incident response, and policy development
Experience in banking/finance and healthcare industries
Exceptional executive communication and advisory skills
Ability to synthesize complex legal issues into practical risk management advice
Knowledge of AI, large language models (LLMs), machine learning, generative AI, and emerging AI risk frameworks (e.g., NIST AI RMF)
Familiarity with evolving federal and state AI regulations and ethical principles
Strategic insight to shape governance structures for emerging technology and data-related risks
Capacity to quickly understand complex business models and align legal requirements with innovation strategies
Benefits
Medical, dental, and vision
HSA contribution and match
Dependent care FSA match
Paid parental leave
401(k) match
Personal and healthcare financial literacy programs
Ongoing education & tuition assistance
Gym and fitness reimbursement
Wellness program incentives
Company
HealthEquity
HealthEquity connects health and wealth by administering Health Savings Accounts (HSAs) and other consumer-directed benefits.
1001-5000 employees
Funding
Current Stage
Public CompanyTotal Funding
$12.5M2014-07-31IPO
2011-09-09Private Equity· $12.5M
Leadership Team
James Lucania
Chief Financial Officer
Garett Kitch
Senior Vice President, Client Sales & Relationship Management
Recent News
2025-12-18
2025-12-04
2025-12-04
Company data provided by crunchbase