Assistant General Counsel, MSO, Privacy, Data & Technology

Our team members are at the heart of everything we do. At Cencora, we are united in our responsibility to create healthier futures, and every person here is essential to us being able to deliver on that purpose. If you want to make a difference at the center of health, come join our innovative company and help us improve the lives of people and animals everywhere.

Apply today!

Cencora is seeking an attorney with significant experience advising and providing strategic leadership in data governance, privacy, cybersecurity, and AI as they apply to our Managed Service Organization (MSO), which serves clinical practice groups in multiple healthcare specialty areas across the United States.

This role reports to the VP, Responsible Data, within Cencora’s legal team and serves as a primary legal partner to MSO leadership on the design, launch, and operation of MSO services, including the collection, use, sharing, and protection of sensitive health information and other regulated data.

This role requires a dynamic, pragmatic leader who collaborates closely with MSO medical professionals, clinical operations, product/technology, information security, compliance, and commercial teams to enable MSO offerings while managing risk in a highly regulated healthcare environment. The successful candidate will deliver business‑oriented legal services and project management across MSO initiatives, including privacy‑by‑design and security‑by‑design reviews, prospective and retrospective research protocols from privacy and technology law angles, data sharing and interoperability arrangements, AI governance, and incident response readiness for MSO platforms and vendor ecosystems.

• Serve as lead counsel for MSO data governance, privacy, AI, and cybersecurity matters, including advising on MSO data flows and operating models; the use and protection of PHI and other sensitive data; and compliance with applicable U.S. federal and state privacy and security requirements (e.g., HIPAA/HITECH and state consumer health privacy laws, as applicable).
• Counsel MSO business owners on privacy, security, and AI requirements for new and existing MSO offerings, including product counseling for MSO platforms, analytics, care/therapy services support, population health insights, and other data‑enabled services.
• Draft, review, and negotiate MSO‑facing privacy and security contractual terms, including BAAs, DPAs, data sharing agreements, service agreements, and vendor/partner security addenda; advise on third‑party risk management, subcontractor flow‑downs, and MSO client requirements.
• Partner with MSO information security and technology teams to support MSO security program needs (e.g., NIST‑aligned controls, HITRUST/ISO considerations where required), including vulnerability management, application security, identity and access management, encryption, logging/monitoring, and secure SDLC practices.
• Lead MSO incident preparedness and response legal support, including tabletop exercises; advise on breach assessment and notification obligations; and coordinate with privacy, security, compliance, communications, and client teams on MSO client and regulatory communications.
• Support MSO governance and reporting, including board/executive updates and diligence support for MSO transactions and strategic partnerships; and respond to MSO client audits, questionnaires, and regulatory inquiries relating to privacy and cybersecurity representations.
• Establish and maintain strong relationships and clear escalation paths with MSO stakeholders (clinical/medical, operations, product/engineering, security, compliance, commercial, and enterprise legal) to drive consistent, scalable MSO approaches to data governance, privacy, and security risk management and to enable MSO data innovation goals.

The lawyer in this role is expected to have a minimum of 9 years of experience as a lawyer combined with expertise in cybersecurity and data governance. The attorney must have a law degree – i.e., be a graduate of an accredited law school and admitted into a US state bar.

The lawyer in this…