About Lyra Health
Lyra is transforming mental health care through technology with a human touch to help people feel emotionally healthy at work and at home. We work with industry leaders, such as Morgan Stanley, Uber, Amgen, and other Fortune 500 companies, to improve access to effective, high-quality mental health care for their employees and their families. With our innovative digital care platform and global provider network, nearly 20 million people can receive the best care and feel better, faster. Founded by David Ebersman, former CFO of Facebook and Genentech, Lyra has raised more than $900 million.
About the Role
You will be a critical member of Lyra’s growing legal team, within its US Privacy division, supporting internal stakeholders in fulfilling Lyra’s mission to bring mental and emotional health solutions to large employers across the country.
This is a full-time remote role and will report to Lyra’s Associate General Counsel, Privacy. You will be expected to work independently in managing questions around a broad scope of privacy issues, conducting legal research, counseling internal stakeholders to resolve privacy questions, and leading projects to support the growth of Lyra’s privacy program and AI governance. The ideal candidate will be a passionate privacy attorney with a proactive nature, and an enthusiasm for new technologies, such as AI, and their governance, and someone who is searching for a collaborative environment brimming with novel questions. The privacy division of Lyra’s legal team plays an essential role at the company, responding to and managing complex privacy questions and establishing a framework to support legal and programmatic privacy initiatives. Experienced candidates are welcome to join our dynamic and passionate team.
This role can be carried out from our Burlingame, CA headquarters, hybrid, or fully remote/virtually. Remote candidates must be physically located within the United States.
ResponsibilitiesSupport Lyra’s privacy program and advise internal stakeholders on privacy concerns related to Lyra’s products and services, and the implementation of new technologies, such as AI.Coordinate with internal teams to ensure corporate adherence to applicable state and federal privacy laws, including, but not limited to, CCPA and HIPAA.Collaborate with commercial counsel to ensure that privacy provisions in commercial agreements and Business Associate Agreements (BAAs) appropriately manage risk and comply with privacy policies, laws, rules, regulations, and company objectives.Review BAAs negotiated by commercial counsel and document data use permissions for new and existing customers.Work cross-functionally to advise product and business teams on potential privacy implications of Lyra’s new and existing product lines, including reviewing and approving product requirement document (PRDs).Investigate, document and report privacy incidents, including breaches, in accordance with applicable law, contractual requirements and corporate strategy.Participate in cross-functional teams working on AI governance and AI use case reviews.Other duties as assigned.QualificationsLaw degree from top-tier law school and membership in a state bar with good standing5+ years legal experience in-house or at a law firmExperience analyzing and advising on health care privacy laws on the state and federal level; implementation of CCPA or GDPR programs a plus, as is experience advising on AI regulation and governance.Excellent problem-solving capabilities, judgment, communication (written and verbal), and interpersonal skillsExperience leading projects, including collecting, distilling and summarizing issues from relevant stakeholders and moving projects forwardExperience in solving product legal matters, including communicating and collaborating effectively with stakeholders with a wide range of legal and technical experience and knowledgeExperience working in-house with a technology company and/or health care organization strongly preferredAdditional experience with the following a plus: State and/or Federal experience with a healthcare regulatory agencyAbility to think quickly on your feet, convey grace under pressure, and simultaneously manage workloads, multiple demands and shifting prioritiesAbility to operate autonomously, yet collaboratively, while bringing a positive attitude to the workplaceSense of humor"We are an Equal Opportunity Employer. We do not discriminate on the basis of race, color, religion, sex (including pregnancy), national origin, age, disability, genetic information or any other category protected by law.
By applying for this position, you acknowledge that your personal information will be processed as per the Lyra Health Workforce Privacy Notice. Through this application, to the extent permitted by law, we will collect personal information from you including, but not limited to, your name, email address, gender identity, employment information, and phone number for the purposes of recruiting and assessing suitability, aptitude, skills, qualifications, and interests for employment with Lyra. We may also collect information about your race, ethnicity, and sexual orientation, which is considered sensitive personal information under the California Privacy Rights Act (CPRA) and special category data under the UK and EU GDPR. Providing this information is optional and completely voluntary, and if you provide it you consent to Lyra processing it for the purposes as described at the point of collection, for example for diversity and inclusion initiatives. If you are a California resident and would like to limit how we use this information, please use the Limit the Use of My Sensitive Personal Information form. This information will only be retained for as long as needed to fulfill the purposes for which it was collected, as described above. Please note that Lyra does not “sell” or “share” personal information as defined by the CPRA. Outside of the United States, for example in the EU, Switzerland and the UK, you may have the right to request access to, or a copy of, your personal information, including in a portable format; request that we delete your information from our systems; object to or restrict processing of your information; or correct inaccurate or outdated personal information in our systems. These rights may be subject to legal limitations. To exercise your data privacy rights outside of the United States, please contact globaldpo@lyrahealth.com. For more information about how we use and retain your information, please see our Workforce Privacy Notice."