Senior Privacy Counsel

The Legal team is responsible for managing the legal affairs of the company, including providing legal counsel across the organization, handling disputes, and creating and enforcing intellectual property.

Let’s talk about the team

Privacy Enablement is the team responsible for providing our business end-to-end support for all their privacy needs, ranging from strategic consulting, project support all the way to risk assessments and mitigation. We are a group of highly talented privacy professionals who value the “how” in achieving results and aim at enabling business objectives in a privacy-compliant manner.

Who are we looking for?

You are an expert in the field of privacy with proven track record of enabling cutting-edge digital offerings. You operate with problem-solving mindset and partner with business leaders to support customer-centric initiatives applying privacy by design principles. You have good stamina and thrive in fast-paced, innovative, diverse work environments. You are agile, curious, process and result-oriented. You are self-aware, caring, collaborative and strive for excellence. 

Let’s talk about the role

We are looking for a dynamic, results-oriented Senior Privacy Counsel to join our Privacy Enablement team and support ResMed’s mission to improve the quality of life for our patients, customers, and partners. You will provide best-in-class privacy and data protection support to ResMed’s product teams and business functions. This key position will be instrumental in establishing Privacy as a value-add function within ResMed and will oversee a diverse portfolio of global responsibilities with a strong focus in digital health technology.

• Work as part of a global privacy team delivering best-in-class privacy and data protection services to ResMed’s digital health, revenue, marketing teams to ensure our products, services, platforms and technology comply with applicable data protection laws and incorporate privacy by design best practices.  
• Analyze products, policies and initiatives to provide practical privacy impact assessments and mitigation controls in the North American region with a global mindset.
• Provide advice on the application of global privacy and healthcare laws to new initiatives, with an emphasis on HIPAA and other North American privacy and healthcare laws (e.g., CCPA/CPRA, PIPEDA).
• Be the main privacy point of contact for one or more business units, establishing partnerships and providing first-class privacy service.
• Draft, review, negotiate, and manage data privacy related legal documents, including privacy notices, consents, data processing agreements, data transfer agreements, business associate agreements, etc. Complete recordkeeping and documentation (e.g., data mapping, privacy impact assessments in OneTrust) necessary to manage risk vis-a-vis business value within a globally compliant privacy program.
• Collaborate with other legal and privacy team members to offer consistent guidance on key areas that cross the organization such as data governance, consent, data retention and deletion, deidentification/anonymization/pseudonymization of data, cross-border data transfers, data security, machine learning, etc.   

• Establish and maintain excellent working relationships with business and product stakeholders, and work proactively with them to identify, mitigate, and address privacy risks.  
• Lead a team of experienced privacy professionals to deliver first-class privacy advice for your clients.

• Stay on top of regulatory trends for cutting-edge technologies, understand their potential implications to the digital health solutions of ResMed, create guardrails and navigate the business through the complexity of such new areas to success.  

What are the qualifications and experience we are looking for?

• 5+ years of practical experience in privacy working as a privacy counsel at a law firm or consultancy and/or in-house. Experience in the digital space, particularly in digital health, or the medical device and/or technology sector, is preferred.
• 2+ years of experience in managing high-performing teams is an advantage;
• A juris doctorate (J.D.) with privacy experience and good standing in a state bar association or equivalent;  
• Privacy certified – CIPP/E/US, CIPM certification(s) and/or CHPC preferred with evidence of continuing professional development in privacy;
• Solid understanding of privacy laws with an emphasis in healthcare (e.g. HIPAA, CCPA/CPRA, GDPR, LGPD, PIPEDA);
• Experience driving privacy by design in areas such as use of apps and mobile applications, biometrics, and data analytics, etc;
• Experience working in a highly