Summary
CIVHC is looking for a Staff Attorney to provide daily legal advice and support on complex health law, data privacy and sharing, labor and employment, and corporate non-profit matters, lead all phases of contract management including significant negotiation and drafting on various agreements, and oversee CIVHC’s regulatory compliance with applicable state and federal laws. In alignment with CIVHC’s mission, this role supports the Legal and Compliance Department’s strategic and operational priori
Description
Duties / Responsibilities / Essential Functions:
Responsibilities for this position may include, but are not limited to:
- Provides daily research, guidance, analysis, and support on a wide variety of complex legal and compliance matters and issues to CIVHC’s various departments, teams, and leaders.
- Responsible for all phases of contract management at CIVHC including but not limited to: reviewing, negotiating, and drafting various types of contracts and templates such as vendor agreements, SAS and IT agreements, multi-jurisdictional agreements, nondisclosure agreements, independent contractor agreements, business associate agreements, and leases, etc.
- Drafts, negotiates, and evaluates Data Use Agreements (DUAs) with various clients including but not limited to academic institutions, state and federal agencies, and private entities.
- Works closely with the Data Access and Evaluation, Innovation, and Research teams on drafting and negotiating all DUAs, new services and product agreements, and other types of agreements to ensure all agreements with clients follow all applicable state and federal requirements.
- Provides legal advice, guidance, and support to Human Resources on employment related matters, new state and federal laws, various projects, and other issues as needed.
- Leads and oversees CIVHC’s regulatory compliance ensuring that CIVHC is in compliance with HIPAA, HITECH, 42 CFR Part 2, antitrust laws, and all other applicable federal and Colorado privacy laws and health care regulations, including the Colorado All Payer Claims Database (CO APCD) statute and the rules and regulations of Colorado Medicaid, Medicare, and the Colorado Division of Insurance.
- Monitors and analyzes proposed and enacted state and federal legislation, regulations, and rules impacting CIVHC, the CO APCD, and health data organizations.
- Will work closely and establish relationships with state and federal agencies as well as the Colorado Attorney General’s office.
- Responds to requests for information from state and federal agencies and provides comments on state and federal regulatory changes as needed in coordination with CIVHC’s internal departments, external partners, and government relations contractors.
- Works closely with the Data Solutions Department and IT team to ensure robust system security in compliance with regulatory frameworks and best practices are in place for CIVHC and as it relates to Data Management Plans for CIVHC’s clients.
- Works collaboratively with other members of the Legal and Compliance Department to achieve the Department’s goals, objectives, and projects, to meet or exceed key performance indicators, and to contribute to CIVHC’s overall mission and values.
- Supports CIVHC’s compliance with the Qualified Entity Certification Program and adherence to the State Agency DUA (will be trained in these areas upon employment).
- Drafts, reviews, and advises on policies, procedures, protocols, and other internal documents necessary to support operations across CIVHC.
- May assist with the Legal and Compliance Department’s external and internal audits including monitoring and auditing contractual requirements.
- Works with and manages outside counsel as needed regarding litigation, intellectual property, tax, and other legal expertise and special projects.
- Assists with all government audits, complaints, responses, and investigations.
- Monitors and assists with corporate compliance activities including but not limited to corporate documentation, state filings, Board of Directors’ governance and training, and insurance renewals.
Training, Communication, & Reporting
- As part of the Legal and Compliance Department, develops and implements employee training and presentations on topics including but not limited to privacy, ethics, policies, best practices, and other laws and topics as requested.
- Provides updates, strategic guidance, risk analyses, and comprehensive legal and compliance advice to the Executive Leadership Team, Senior Leadership Team, and other departments and teams on regulatory changes, new laws, risk areas, legal and compliance trends and issues, and other topics.
Projects
- Contributes to strategic initiatives and cross-departmental special projects as assigned by the General Counsel.
- Assists with other Legal and Compliance Department efforts, work, and projects as needed and assigned by the General Counsel.
Reasonable accommodations may be made to enable individuals with disabilities to perform essential functions.
Required Skills / Abilities
- Strong analytical and problem-solving skills, with the ability to assess complex regulatory requirements.
- Ability to develop practical and proactive solutions while also demonstrating flexibility and creative thinking in various situations.
- Excellent contract drafting and negotiation skills.
- Exceptional written and verbal communication skills, with the ability to clearly convey technical legal and regulatory concepts to diverse audiences in a clear and concise manner.
- Proven ability to build effective cross-functional relationships and collaborate with external and internal partners at all levels.
- High attention to detail and strong organizational skills to manage multiple priorities, projects, and deadlines.
- Strong facilitation and training delivery skills.
- Proficiency in Microsoft Office 360 programs and experience.
- Ability to work independently and exercise sound judgment in high-stakes or ambiguous situations.
Education & Experience
- Juris Doctorate from an American Bar Association accredited law school;
- Health Law Certificate strongly preferred.
- License to practice law in Colorado or the ability to get licensed in Colorado within 6 months of employment (License must be in good standing in Colorado or other jurisdictions)
- Advanced knowledge of health care laws and regulations including but not limited to HIPAA, HITECH, 42 CFR Part 2, Medicaid, Medicare, antitrust laws, and employment and labor laws.
- Minimum of two (2) years experience practicing law (preferably in a law firm, government, or in-house position focused on health care, data privacy, and contract drafting).










