San Bruno, CA or Dallas, TX or Raleigh, NC or Boston, MA, or Remote-US
Type
Full Time
Responsibilities:
Provide strategic guidance to internal business teams on privacy issues, policies, and standards. Maintain and continuously improve the Company’s Data Privacy and Protection Program, including the creation, review and revision of policies and procedures.
Identify, evaluate, and monitor risk areas, providing business leaders with the information they need to make critical decisions, as well as identifying and implementing continuous improvement opportunities.
Collaborate with leadership throughout the Company to develop and maintain an effective, privacy training and awareness program, including promoting: (a) designing enterprise-wide and role-based training, (b) understanding of new and existing privacy issues and related policies and procedures, and (c) reporting of privacy-related concerns.
Coordinate the investigation of and response to alleged violations of privacy rules, regulations, policies, and procedures; directly manage privacy-related investigations; ensure reporting of violations or potential violations to appropriate agencies. Conduct regular gap analyses, risk assessments, and program effectiveness evaluations.
Knowledge of and experience with advising on compliance with HIPAA, FTC Act, state privacy laws, PIPEDA, and GDPR. Strong technical acumen, with a solid understanding of technical privacy control implementation and practices.
Requirements & Skills:
JD, MBA, or Master’s degree.
10+ years of privacy program management advisory experience.
Significant experience in life sciences, medical devices, or the healthcare industry. Broad and thorough knowledge of all components of effective privacy programs.
Experience with issues and challenges facing the commercial, research, and clinical components of an organization with a full understanding of, and ability to adopt, global privacy efforts to effectively respond to legal/regulatory changes and technological trends.
May require domestic travel 1-2 times per quarter.
5 years of relevant experience in-house.
Advanced interpersonal skills and ability to interact effectively with and influence people at all organizational levels of the company, including senior management and executive leadership.
Strong record of integrity, strict confidentiality, sound judgment, and experience in clearly advising leadership on sensitive issues.
