The Vice President, Associate General Counsel & Privacy Officer provides company-wide legal counsel in connection with AI governance, data privacy, HIPAA compliance, and cybersecurity risk management. The AGC will act as the Chief Privacy Officer and will be responsible for interfacing with the executive leadership team on all matters relating to privacy. This role is also responsible for supervising the company-wide system of contract management with support from a contract manager. The AGC ensures that all IT and vendor contracts for the company are reviewed, negotiated and tracked within our contract management system. This position will collaborate closely with the Chief Technology Officer, Chief Information Security Officer, Procurement function, the Executive Leadership Team, and other functional business areas as well as the attorneys, paralegals, and managers within the legal department assisting with any legal matters as needed.

Functions & Responsibilities:

Commercial Contracting: Estimated 40% of Time : Lead legal review and negotiation of software licensing agreements, staffing agreements, consulting agreements, SaaS agreements, AI platform agreements, technology service agreements, business associate agreements, cybersecurity vendor contracts, general vendor contracts, and strategic partnerships. Advise procurement and business stakeholders on business, legal, privacy, and data security risks within those agreements.

AI Governance & Responsible AI: Estimated 25% of Time : Lead the organization's AI legal and governance strategy, in close collaboration with IT, Compliance and Operations. Develop and maintain AI governance frameworks, policies, and approval processes. Advise executive leadership on legal, ethical, and regulatory implications of generative AI, machine learning, and emerging technologies. Review and approve AI initiatives involving protected health information (PHI), employee data, or proprietary information. Monitor evolving federal and state AI regulations and assess organizational impacts. Support development of enterprise AI risk management practices aligned with industry frameworks such as the NIST AI Risk Management Framework.

Privacy & HIPAA Compliance: Estimated 25% of Time : Serve as legal advisor on HIPAA privacy, security, and breach notification requirements. Oversee breach response investigations and reporting obligations. Provide guidance regarding use, disclosure, retention, and protection of PHI and personally identifiable information. Oversee legal aspects of data privacy compliance, including HIPAA, HITECH, CCPA/CPRA, state privacy laws, and other applicable regulations. Partner with IT, Marketing, and other departments on privacy impact assessments and risk mitigation activities, including practices and policies regarding biometrics and data capture, collection, and tracking.

Technology & Cybersecurity: Estimated 10% of Time : Provide legal oversight for cybersecurity governance and data protection strategies. Advise on incident response, ransomware events, data breaches, and regulatory reporting requirements. Review technology architecture, cloud computing arrangements, SaaS agreements, and enterprise software implementations. Support vendor risk management initiatives involving technology providers. Develop contractual and governance standards related to information security and data protection.

Qualifications

Must Haves

Juris Doctor (J.D.) from an accredited law school.

Active bar membership in good standing in the United States.

7+ years of legal experience with at least three years of full time (not contract) law firm experience.

Extensive training and experience negotiating high dollar IT and vendor agreements.

Strong drafting skills for complex and sophisticated matters.

Cutting edge expertise in advising clients on the use of AI and building enterprise AI governance programs.

Ability to identify changes in law and educate and train others on these changes.

Comprehensive expertise in privacy and HIPAA compliance.

Detail-oriented, organized, responsive and deadline-driven.

A fun and collaborative team player.

Mature self-starter.

Preferred, but not Required

Healthcare industry experience.

Professional certifications such as CIPP/US, CIPM, CHPC, or another recognized information privacy credential. Must be willing to obtain such certifications.

Experience managing other team members.

InnovAge is dedicated to empowering seniors to live independently, allowing them to age in their own homes and communities safely. InnovAge offers an alternative to nursing homes through its Program of All-inclusive Care for the Elderly (PACE), which provides enrolled seniors with customized healthcare and social support at PACE Adult Day Health Centers. These centers are staffed by medical professionals who are committed to creating personalized care plans for each participant. At InnovAge, our team members are our greatest asset and have a significant impact on the lives of our participants every day. When you join InnovAge, you'll work alongside talented, respectful, and passionate colleagues within a patient-centered care model.

InnovAge is committed to equal opportunity and affirmative action, and we strive to create a diverse and inclusive workplace. We consider all qualified candidates for employment without discrimination based on race, color, religion, sex, sexual orientation, gender identity/expression, national origin, disability, protected veteran status, pregnancy, or any other protected status. Salaries are determined by various factors such as qualifications, experience, and location, and do not include potential bonuses or benefits. Our extensive benefits package includes medical/dental/vision insurance, short and long-term disability, life insurance and AD&D, supplemental life insurance, flexible spending accounts, 401(k) savings, paid time off, and company-paid holidays.

Applicants are considered until the position is filled. $260,000 - $299,000 Compensation Disclaimer

The pay may vary depending on job related factors, such as work location, experience, knowledge, skills, education, certifications, training and internal equity. InnovAge offers a comprehensive benefits package, which includes medical, dental, vision, 401(k) plan with company match, short and long-term disability, life insurance, supplemental life insurance, ADD, flexible spending account, paid time off and company paid holidays.

Attention Florida Applicants This position requires a background screening through the Florida Care Provider Background Screening Clearinghouse. For more information, please visit the Clearinghouse Education and Awareness website: https://info.flclearinghouse.com

Agency Disclaimer

InnovAge will not accept unsolicited resumes from search firms for this employment opportunity. Regardless of past practices, all candidates/resumes submitted by search firms to InnovAge by any means without a valid written search agreement in place for that position will be deemed the property of InnovAge and no fee will be paid in the event such candidate is hired by InnovAge.

Fraud Disclaimer

InnovAge is committed to maintaining a safe, transparent, and respectful hiring process for all candidates.

Please be aware that all legitimate email communication regarding InnovAge job opportunities will come exclusively from an email address ending in @innovage.com.

At no point in our hiring process will InnovAge:

Request payment from candidates for equipment, background checks, onboarding, training, or any other employment‑related purpose

Ask for financial information (such as bank account details) before a formal offer and onboarding process is completed through our official systems

If you receive a message claiming to represent InnovAge that does not align with the above, it may be fraudulent. We encourage you to exercise caution and refrain from engaging or sharing personal information.

If you believe you have been contacted by someone misrepresenting InnovAge, please report the activity to HRAnswers@innovage.com or apply directly through our official career site to ensure the opportunity is legitimate.

Your trust matters to us, and we appreciate your interest in joining InnovAge.