Privacy Counsel

## Privacy Counsel Apply:
Hybrid:
Cincinnati, OH (USA):
Full time:
Posted Today:
R9566
** Be Here. Be Great.
** Working for a leader in the insurance industry means opportunity for you. Great American Insurance Group's member companies are subsidiaries of American Financial Group. We combine a  small company  culture where your ideas will be heard with  big company  expertise to help you succeed. With over 30 specialty and property and casualty operations, there are always opportunities here to learn and grow.

At Great American, we value and recognize the benefits derived when people with different backgrounds and experiences work together to achieve business results. Our goal is to create a workplace where all employees feel included, empowered, and enabled to perform at their best.

This position is not eligible for employment visa sponsorship. Applicants must be authorized to work in the United States without the need for current or future sponsorship.

Great American’s culture is built on connection, shared learning, and strong relationships. To support this, employees in this role are expected to be on-site four days a week, with the flexibility to work one day remotely. Core in‐office days are Tuesday–Thursday, with the fourth day determined by business needs.

The Company is seeking a practical, collaborative Privacy Attorney to join its legal and compliance team and support a broad portfolio of privacy, data protection, cybersecurity, emerging technology/AI, and regulatory matters. The attorney will partner with business, technology, information security, compliance, procurement, and legal stakeholders across a complex insurance organization to translate evolving legal requirements into clear, defensible, and operationally workable solutions and support the organization’s privacy program.

This role is well suited for an attorney with four to five years of relevant experience, who has a background in privacy and data protection frameworks and is ready to take on meaningful responsibility in an in-house environment.
** Essential Job Functions and Responsibilities
*** Support the development, implementation, and ongoing maturation of the Company’s privacy program, including policies, procedures, training, governance, and third-party contracting.
* Support privacy and security incident response, including investigation, remediation, documentation, and individual and regulator notifications under applicable laws.
* Draft, review, and negotiate privacy and data protection terms in commercial agreements, including data processing agreements, business associate agreements, and artificial intelligence provisions.
* Support compliance with privacy and data security laws, such as the NYDFS Part 500, GLBA and related state insurance laws and regulations, CCPA/CPRA, HIPAA, GDPR, and other applicable regulatory frameworks.
* Monitor legal and regulatory developments and translate them into practical recommendations, policies, controls, training, and implementation plans.
* Develop trusted relationships with internal clients and deliver responsive, business-oriented legal guidance and workable compliance frameworks.
** Required Qualifications
*** Juris Doctor degree from an accredited law school.
* Active license and good standing in at least one U.S. jurisdiction.
* Generally, four to five years of relevant legal experience in privacy, health information, cybersecurity, technology, or related regulatory practice.

Experience with HIPAA a plus.##
** Preferred Qualifications
*** Experience in a law firm, advising on a variety of privacy, cybersecurity, and emerging technology matters.
* Experience with insurance or financial services regulations.
* Experience supporting privacy or security incident response and…