Senior Managing Counsel, Privacy & Cybersecurity (Americas)

Benefits

Additional Information

Thank you for your interest in joining Solventum. Solventum is a new healthcare company with a long legacy of solving big challenges that improve lives and help healthcare professionals perform at their best. At Solventum, people are at the heart of every innovation we pursue. Guided by empathy, insight, and clinical intelligence, we collaborate with the best minds in healthcare to address our customers' toughest challenges. While we continue updating the Solventum Careers Page and applicant materials, some documents may still reflect legacy branding. Please note that all listed roles are Solventum positions, and our Privacy Policy: https://www.solventum.com/en-us/home/legal/website-privacy-statement/applicant-privacy/ applies to any personal information you submit. As it was with 3M, at Solventum all qualified applicants will receive consideration for employment without regard to their race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran. Job Description: At Solventum, we enable better, smarter, safer healthcare to improve lives. As a new company with a long legacy of creating breakthrough solutions for our customers' toughest challenges, we pioneer game-changing innovations at the intersection of health, material and data science that change patients' lives for the better while enabling healthcare professionals to perform at their best. Because people, and their wellbeing, are at the heart of every scientific advancement we pursue. We partner closely with the brightest minds in healthcare to ensure that every solution we create melds the latest technology with compassion and empathy. Because at Solventum, we never stop solving for you. The Impact You'll Make in this Role The Sr. Managing Counsel, Privacy & Cybersecurity (USAC & LATAM) will lead the legal support for privacy and cybersecurity efforts across the company's USAC and LATAM operations. The role involves advising and collaborating with the IT, cybersecurity, business and functional teams, and external partners to manage legal risks related to data security and privacy. This position will play a key role in strengthening the company's security posture, ensuring compliance, and overseeing security and compliance assessments across applications, processes, products, and vendors. The Sr. Managing Counsel will report to the Chief Privacy Officer and the Vice President of Information and Digital, based in the United States. Provide expert legal counsel to Privacy and Cybersecurity teams to ensure compliance with contractual commitments and regulatory obligations related to data privacy and security. Conduct privacy and data protection impact assessments to ensure sensitive health data is used in compliance with privacy regulations and contractual rights. Advise cybersecurity teams on incident response and investigations, ensuring proper documentation to minimize risks, protect privacy, and fulfill legal obligations during and after security incidents. Collaborate with Procurement and business contracting teams to draft, negotiate, and maintain privacy/data protection terms in contracts and agreements. Lead the company's legal response to product vulnerabilities, information security breaches, and cyber events, including advising on regulatory notifications at federal, state, and international levels. Counsel IT operations, security teams, and business units on developing and implementing cybersecurity plans, incident response strategies, and compliance with industry standards and regulations. Work closely with Cybersecurity, Procurement, and Legal teams to manage third-party risks, including creating contract templates, negotiation frameworks, and advising on third-party audits and assessments. Advise on the de-identification, pseudonymization, and anonymization of sensitive health data. Provide guidance to business and product teams on data handling requirements based on sensitivity and compliance standards. Implement "privacy by design" principles in product development processes and contribute to product risk assessments. Stay informed on emerging global regulatory requirements impacting data privacy and security and advise the business accordingly. Develop and provide legal content for privacy training programs, awareness campaigns, and compliance with sensitive health information handling requirements. Your skills & Expertise To set you up for success in this role from day one, Solventum requires (at a minimum) the following qualifications: Juris Doctor (JD) from an accredited law school or Law degree 8 years of experience in data privacy and cybersecurity law, ideally within the life sciences, healthcare, medical devices, or similarly regulated industries Expertise in global data privacy laws (including GDPR) and AI laws (including EU AI Act). Expertise in US data privacy laws and regulations, including HIPAA and US state consumer privacy laws (e.g., CCPA, CPA, et