Assistant General Counsel, Abridge

• The ideal candidate will have 10+ years of healthcare privacy experience
• Juris Doctor (JD) degree from an accredited law school and active bar membership in good standing in at least one U.S. jurisdiction
• 8+ years of relevant privacy and data protection experience, including in-house counsel roles
• Demonstrated ability to work independently and exercise business judgement, interest in joining a small team that prioritizes autonomy and trust
• Deep understanding of global privacy regulations, including GDPR, UK GDPR, CCPA/CPRA, biometric specific laws and other U.S. privacy and data security frameworks
• Demonstrated experience leading data breach and incident response programs
• Practical, risk-based mindset and strong organizational skills—comfortable building scalable systems that reduce redundancy and ensure compliance
• Strong communication and interpersonal skills, ability to distill complex regulatory requirements into clear, actionable advice tailored for business partners
• Ability to manage multiple concurrent priorities in a fast-paced environment

Desirable

• We are seeking an experienced Privacy Counsel to join our legal team and support Abridge’s continued growth
• This role will partner closely with business teams and senior leadership to drive strategic initiatives while managing legal risk and ensuring compliance
• Lead Abridge’s incident response and data breach management program, including investigation protocols, notification assessments, regulatory reporting, and post-incident remediation
• Build and scale efficient, cross-functional privacy compliance programs aligned with national and global frameworks including GDPR, UK DPA, CCPA/CPRA, and other U.S. state-level privacy laws
• Partner closely with Security, Product, and Engineering teams to ensure security safeguards, privacy-by-design, and clear roles and responsibilities in data governance, data access, and incident preparedness
• Partner the support function to respond to requests from customers for access to or deletion of data
• Collaborate with internal Legal colleagues to ensure privacy compliance is integrated into wider compliance and regulatory strategies (e.g., marketing, procurement, product lifecycle, public policy, customer flow-through requirements), and advise other teams in the business on how to perform their functions in a manner that complies with data protection laws
• Develop and deliver privacy policies, playbooks, templates, and training materials that promote awareness and enable operational consistency
• Stay abreast of privacy and data security trends and regulatory changes, and assess their practical impact on Abridge’s operations