Corporate Counsel

About the Role

Office Ally is seeking a commercially-minded Corporate Counsel to join the legal team. Reporting to the General Counsel, this is a high-impact, high-autonomy role covering commercial contracting, healthcare compliance, HIPAA and PHI governance, data commercialization, and legal technology.

The role includes negotiating complex data licensing deals, advising on HIPAA breach responses, collaborating with sales to streamline CLM workflows, and leveraging AI to enhance contract and business processes.

What You'll Do

Commercial Contracting & CLM

• Draft, negotiate, and manage agreements including SaaS agreements, BAAs, revenue recovery service agreements, data licensing and data sharing agreements, vendor contracts, and payer agreements.
• Own and administer the CLM platform (Ironclad or similar), including workflow configuration, template management, and process improvement.
• Maintain contract templates, negotiation playbooks, and fallback positions to enable efficient sales and partnership processes.

HIPAA, PHI & Healthcare Compliance

• Serve as a primary legal resource on HIPAA/HITECH compliance, including Privacy, Security, and Breach Notification Rules.
• Advise on PHI handling, use, disclosure, and de-identification.
• Support HIPAA compliance program activities such as policy development, workforce training, risk assessments, and breach response.
• Advise on state healthcare privacy laws and monitor HHS, OCR, and CMS regulatory developments.

Product Development and Commercialization

• Counsel on compliant commercialization of healthcare data, including structuring and licensing data products and data-as-a-service offerings.
• Advise on PHI under HIPAA authorizations and BAAs, as well as de-identified data use.
• Partner with product, data science, and business development teams to structure new data monetization opportunities.

Broader Compliance & Legal Support

• Support compliance risk assessments, internal investigations, and responses to government inquiries and audits.
• Manage subpoenas and other legal process requests.
• Assist with M&A due diligence, corporate governance, and transaction support.

Legal Technology & AI

• Champion CLM administration and legal operations process improvements.
• Evaluate and deploy AI-powered tools for contract review, compliance research, and legal drafting.
• Advise on legal and regulatory considerations related to AI and machine learning use in products.

What You Need

• Juris Doctor (J.D.) degree and active U.S. bar admission.
• 4+ years of experience in healthcare technology, health IT, or SaaS.
• Substantive HIPAA expertise and hands-on PHI governance experience.
• Experience negotiating BAAs and drafting SaaS and data-related agreements.
• Experience with a CLM platform; Ironclad preferred.
• Demonstrated use of AI tools for legal applications.
• Strong organizational skills and ability to manage varied matters.

Nice to Have

• In-house experience at a health IT company, clearinghouse, or RCM organization.
• Experience with data-centric business models.
• Familiarity with emerging healthcare and health data legislation.
• Experience with AI tools in a sales-centric CLM environment.
• Experience in a PE-backed company environment.

Travel Requirements

• Limited travel up to 5 times per year.

Work Arrangement

• Remote or hybrid work arrangements supported.
• Hybrid schedule expected for candidates near Brentwood, TN; Vancouver, WA; Lehi, UT; or San Antonio, TX.