Corporate Counsel

Office Ally•Brentwood, TN

15h•$150,000 - $170,000

About The Position

Office Ally is seeking a commercially-minded Corporate Counsel to join our legal team. Reporting to the General Counsel, this is a high-impact, high-autonomy role touching virtually all aspects of the company's day-to-day legal work, with particular depth in commercial contracting, healthcare compliance, HIPAA and PHI governance, data commercialization, and legal technology. In this role, you’ll negotiate complex data licensing deals, advising on a HIPAA breach responses, collaborate with our sales team to manage and streamline our CLM workflow, and utilize AI to make the legal function faster and smarter by improving contract workflows and cross-functional business processes. This role is ideal for a pragmatic, business-oriented attorney who thrives as a problem-solving generalist with healthcare technology experience, enjoys working across multiple legal disciplines simultaneously, and wants to be deeply embedded in the business operations of a growth-stage healthcare technology company.

Requirements

Juris Doctor (J.D.) degree and active bar admission in at least one U.S. state.
4+ years of experience, including meaningful in-house and/or law firm experience in healthcare technology, health IT, or SaaS.
Substantive HIPAA expertise, including hands-on experience with PHI governance and negotiation of BAAs.
Experience advising on healthcare data commercialization or data licensing arrangements.
Experience drafting and negotiating SaaS, data sharing, and related commercial technology agreements.
Experience with a CLM platform; Ironclad strongly preferred.
Demonstrated interest in or active use of AI tools for legal applications, and genuine enthusiasm for building a modern, tech-enabled legal function.
Clear and effective communicator with the ability to translate complex legal issues into practical guidance for non-lawyers.
Highly organized, self-directed, and comfortable managing a high volume of varied matters.
Problem-solving skills and business-practical mindset are paramount.

Nice To Haves

In-house experience at a health IT company, clearinghouse, or RCM organization.
Experience with data-centric business models.
Familiarity with emerging federal and state healthcare and health data legislation.
Experience with AI tools and working within sales-centric CLM.
Prior experience in a PE-backed company environment.

Responsibilities

Draft, negotiate, and manage a broad range of commercial agreements, including SaaS agreements, BAAs, revenue recovery service agreements, data licensing and data sharing agreements, vendor contracts, and payer agreements.
Own and administer the company's CLM platform (Ironclad or similar), including workflow configuration, template management, and process improvement.
Improve and maintain Office Ally's form contract templates, negotiation playbooks, and fallback positions to enable the sales and partnerships teams to move quickly and consistently
Serve as a primary legal resource on HIPAA/HITECH compliance, including the Privacy, Security, and Breach Notification Rules, with particular focus on Office Ally's unique role as a healthcare clearinghouse and business associate.
Advise on PHI handling, use, disclosure, and de-identification across Office Ally's products and data operations.
Support the company's HIPAA compliance program, including policy development, workforce training, risk assessments, and breach response.
Advise on state healthcare privacy laws, including sensitive health data categories and monitor HHS, OCR, and CMS regulatory developments.
Counsel the business on the compliant commercialization of healthcare data, including the structuring, licensing, and sale of data products and data-as-a-service offerings, ensuring that each transaction is grounded in a defensible regulatory framework and aligned with Office Ally's obligations to its customers and their patients
Advise on the full spectrum of data use scenarios--PHI under HIPAA authorizations and BAAs, as well as de-identified data.
Partner with product, data science, and business development teams to assess new data monetization opportunities and structure them compliantly from the ground up.
Support compliance risk assessments, internal investigations, and responses to government inquiries and audits.
Manage and respond to subpoenas and other legal process requests, including coordinating with internal teams on document collection, reviewing responsive records for privilege and confidentiality, and liaising with outside counsel as needed.
Assist the General Counsel on M&A due diligence, corporate governance, and transaction support.
Champion CLM administration and legal ops process improvements across the legal function.
Evaluate and deploy AI-powered tools for contract review, compliance research, and legal drafting — and serve as an internal advocate for responsible AI adoption.
Advise on legal and regulatory considerations around Office Ally's own use of AI and machine learning in its products.