Assistant General Counsel & Privacy Officer

BlueCross BlueShield of Vermont•Berlin, VT

1d•$87,000 - $102,000•Hybrid

About The Position

Blue Cross and Blue Shield of Vermont (Blue Cross VT) is looking for an Assistant General Counsel & Privacy Officer to join our legal department. You will be responsible for protecting member privacy and enforcing industry standards of data integrity while helping Blue Cross VT navigate the complexities of a shifting digital landscape that includes artificial intelligence. Blue Cross VT’s legal department consists of the General Counsel and 4 other attorney positions. The size of the legal department fosters considerable collaboration on general legal matters while also allowing each attorney to become a subject matter expert in multiple areas. There is always room for growth at Blue Cross VT. Our company culture is built on an unwavering focus on the health of Vermonters, outstanding member experiences, and responsible cost management for all the people whose lives we touch. We offer a balanced, flexible workplace, a competitive salary and full benefits package including medical and dental insurance, vision, 401k, paid time off and holidays, fitness and wellness programs, an onsite gym, tuition reimbursement and student loan repayment, dependent caregiver benefits, and resources to support your ongoing personal and professional growth and development. REMOTE WORK: Blue Cross has transitioned to a hybrid workplace. This position will be expected to work in the office on Tuesdays and Wednesdays with flexibility to work remotely the rest of the week. We are only hiring Vermonters for this role. COMPENSATION: The base salary range for this position is 87,000-102,000 (up to you!!) Additional compensation opportunities and incentives will be detailed during the interview process. Please note that the range listed above is our good faith estimate of the hiring range for this role. If you are hired at Blue Cross and Blue Shield of Vermont, your final base salary compensation will be determined based on factors such as skills, competencies, education, experience, and internal equity across the current team. We also offer a robust benefits package with significant value (see below).

Requirements

Graduate of an ABA accredited law school, holds JD degree.
Admitted to practice before the Vermont Bar.
3-5 years in a law firm or corporate law department, healthcare, privacy, insurance, or regulatory exposure preferred.
Working knowledge of HIPAA and healthcare regulatory frameworks.
Experience drafting and negotiating commercial contracts.
Strong analytical judgment and ability to translate complex legal uses into practical business guidance.
Demonstrated initiative, ownership mentality, and ability to perform in a fast-paced, evolving environment.
Comfort engaging directly with senior stakeholders and managing high visibility matters.

Responsibilities

Oversee day-to-day administration of the organization’s privacy operations including oversight of permitted access, use, and disclosure of information.
Serve as incident Response Coordinator and lead privacy incident investigations and perform risk assessments, including coordination with IT, Compliance, and executive stakeholders.
Develop and enhance privacy policies, procedures, and training programs.
Interpret state and federal statutes and regulations that impact the Corporation, including those pertaining to federal and state legal and regulatory requirements applicable to the Corporation.
Support regulatory audits, filings, and examinations while proactively assisting Compliance and operational teams in addressing regulatory risk.
Draft, review, and negotiate vendor agreements, non-disclosure agreements (NDAs), business associate agreements (BAAs), and related commercial contracts.