Associate - Healthcare Privacy and Compliance

BakerHostetler is seeking a junior-to-mid-level associate (2–4 years of experience) to join its nationally recognized Healthcare Privacy and Compliance team within the Digital Assets and Data Management (DADM) Practice Group.

This is an opportunity to build a cutting-edge practice at the intersection of healthcare, privacy, cybersecurity, regulatory compliance, and emerging technology. Our team advises some of the nation's leading healthcare organizations on their most complex and high-stakes privacy and cybersecurity matters, including ransomware attacks, business email compromises, regulatory investigations, HIPAA compliance, data governance, and artificial intelligence-related issues.

Associates on our team receive substantial responsibility, direct client interaction, and mentorship from nationally recognized leaders in healthcare privacy and cybersecurity law.

What You'll Do

As a member of the Healthcare Privacy and Compliance team, you will:

• Advise healthcare organizations on privacy and cybersecurity incidents, including ransomware attacks, business email compromises, insider threats, and other data security events.
• Coordinate and manage incident response efforts involving forensic investigators, notification vendors, crisis communications professionals, and law enforcement.
• Conduct breach assessments and counsel clients regarding state and federal notification obligations.
• Assist healthcare clients with investigations and inquiries from federal and state regulators, including the U.S. Department of Health and Human Services Office for Civil Rights (OCR) and state attorneys general.
• Counsel clients on HIPAA Privacy Rule and Security Rule compliance and broader privacy and data governance obligations.
• Develop and conduct incident response preparedness programs, tabletop exercises, and privacy and cybersecurity training.
• Advise clients on emerging issues involving artificial intelligence, digital health technologies, and evolving privacy regulations.
• Collaborate with lawyers across BakerHostetler's nationally recognized privacy, cybersecurity, healthcare, litigation, and regulatory practices.

Qualifications

We encourage applications from candidates with experience in privacy, cybersecurity, healthcare law, litigation, investigations, regulatory compliance, government enforcement, or related areas.

Qualified Candidates Will Have

• 2–4 years of relevant legal experience.
• Strong academic credentials.
• Excellent legal research, writing, analytical, and communication skills.
• The ability to manage multiple matters in a fast-paced environment.
• Sound judgment and strong problem-solving abilities.
• A demonstrated interest in privacy, cybersecurity, healthcare, technology, investigations, or regulatory matters.
• A collaborative approach and desire to work as part of a nationally integrated team.

The Following Are Preferred But Not Required

• HIPAA privacy and security experience.
• Incident response or cybersecurity counseling experience.
• Experience working with healthcare industry clients.
• Prior government, regulatory, judicial clerkship, or Am Law 200 experience.
• Privacy certifications such as CIPP/US or related credentials.

Location:

This position may be in Atlanta, GA; Chicago, IL; Dallas, TX; Houston, TX; or Philadelphia, PA

The salary offered in any location will be determined by a wide range of factors, including, but not limited to, experience level, education/training, geographic region, and relevant skills. Associates also participate in a performance- and hours-based bonus program. BakerHostetler offers a comprehensive and competitive benefits program, including group health, dental and vision insurance, paid holidays (10 days), paid time off, 401(k) plan, parental leave (10 weeks, not including disability, where applicable), family care program, wellness program, life and accident insurance, and short and long-term disability.

For Chicago, the expected annual salary range for this position is $235,000-$285,000.

Why BakerHostetler?

• Join one of the nation's leading healthcare privacy and cybersecurity teams.
• Work on sophisticated, high-profile matters involving cybersecurity incidents, regulatory investigations, and emerging technologies.
• Receive hands-on mentorship from recognized industry leaders.
• Gain meaningful client contact and responsibility early in your career.
• Collaborate across offices in a collegial, entrepreneurial, and team-oriented environment.
• Develop a highly marketable practice at the forefront of privacy, cybersecurity, healthcare, and artificial intelligence.
• Enjoy competitive compensation and comprehensive benefits.

Application Submission Information

Qualified Candidates – Self-ApplyPlease apply through the link provided in the posting and submit:

• Cover Letter
• Resume
• Law School Transcript
• Writing Sample

Questions regarding the position or application process may be directed to: Texas Recruiting Manager, Deirdra Clement at [email protected] .

Search FirmsIf your search firm has a fully executed search firm agreement with BakerHostetler, please submit candidate materials, including an introduction, resume, law school transcript, and writing sample, to Deirdra Clement at [email protected] .

If your search firm does not have a fully executed search firm agreement with BakerHostetler, please submit only blind candidate profiles to Deirdra Clement at [email protected] .

Applications will be accepted on an ongoing basis until the position is filled.

Baker & Hostetler LLP is an Equal Opportunity Employer.