Data Privacy Senior Manager

Position Summary

The Data Privacy Senior Manager will work closely with the Vice President – Information Security and Privacy in maturing the Global Data Privacy Program. The successful candidate will assume ownership of all aspects of the Program with an emphasis on ensuring privacy policies are in place and remain current; internal documentation including Privacy Impact Assessments are complete and maintained in accordance with requirements, developing and delivering training and reviewing contractual agreements to verify they are structured to mitigate data privacy compliance risks.

Principal Responsibilities

•    Ensure data privacy policies, notices and consents are in place in accordance with regulatory requirements.
•    Internal documentation (ex. Data Protection Impact Assessments) is complete and amended as required when business operations and/or technology change.
•    Develop and lead all data privacy training and awareness initiatives.
•    Assist in contract reviews relative to data privacy and protection.
•    Manage all internal and external data privacy inquiries including Data Subject requests.
•    Assist in supporting required data breach reporting activities.
•    Work closely with cross-functional project teams to ensure privacy compliance and risks are managed.
•    Prepare and deliver executive updates on data privacy metrics and adherence to compliance requirements.
 

Education / Experience Requirements

•    Bachelor’s Degree in Business, Public Policy, Political Science, Legal Studies or related field. Post-graduate (including JD) degree preferred.
•    8+ years of privacy experience in a consulting firm, or in-house compliance/legal department or a minimum of 5 years leading a global privacy program.
•    International Association of Privacy Professionals (IAPP) Certifications including CIPP, CIPM or CIPT preferred.

Specialized Skills / Other Requirements

•    Strong command of the key data privacy principles and solid foundational understanding of industry leading regulations such as GDPR, CCPA, CPRA, PIPL etc.
•    Understanding of FDA requirements relating to medical data privacy requirements.
•    Ability to define data privacy standards and data handling procedures that integrate with key business processes.
•    Significant experience in contractual agreements with an emphasis on data privacy and protection components.
•    Experience in conducting and maintaining Privacy Impact Assessments involving privacy regulated data that is collected, assess privacy risk, data protections and document conclusions.
•    Proven ability to address privacy issues, incidents, and inquiries from data subjects and to respond to them timely in accordance local requirements.
•    Experience working with cross functional leaders to ensure internal and external facing privacy notice(s), consent language and cookie usage policy align with internal business practices as well as global and local privacy laws.
•    Strong communication skills and abiltiy to develop and deliver data privacy training/awareness to diverse functional groups and executive leadership.
•    Willing and able to travel (up to 10%) including International.
•    Ability to maintain a flexible work schedule (able to meet the requirements of the position as needed including ability to work evenings and weekends when necessary).