Senior Lead, Privacy and Data Security Counsel

The Company

Dexcom Corporation (NASDAQ DXCM) is a pioneer and global leader in continuous glucose monitoring (CGM). Dexcom began as a small company with a big dream: To forever change how diabetes is managed. To unlock information and insights that drive better health outcomes. Here we are 25 years later, having pioneered an industry. And we're just getting started. We are broadening our vision beyond diabetes to empower people to take control of health. That means personalized, actionable insights aimed at solving important health challenges. To continue what we've started: Improving human health.

We are driven by thousands of ambitious, passionate people worldwide who are willing to fight like warriors to earn the trust of our customers by listening, serving with integrity, thinking big, and being dependable. We've already changed millions of lives and we're ready to change millions more. Our future ambition is to become a leading consumer health technology company while continuing to develop solutions for serious health conditions. We'll get there by constantly reinventing unique biosensing-technology experiences. Though we've come a long way from our small company days, our dreams are bigger than ever. The opportunity to improve health on a global scale stands before us.

Meet the team:

To foster growth and innovation at Dexcom, this individual will support a broad range of privacy and data security activities within Dexcom’s Global Privacy team sitting within its Legal Department. Reporting directly to Dexcom’s Chief Privacy Officer, this role will particularly focus on response and management of privacy and security incidents and will act as a liaison and support Dexcom’s IT and R&D teams responsible for cybersecurity.

This role will also support other activities of the Global Privacy team, which include negotiating data protection terms, fulfilling data subject rights requests, and conducting privacy impact assessments.

As a key team member, this individual must be a highly motivated self-starter, who is comfortable collaborating as part of a team, communicating directly with senior leaders, and working independently.

Where you come in:

• You will collaborate with in-country, business and function Legal teams to drive high quality, consistent, compliant and efficient incident response globally.
• You will work with members of Dexcom’s Legal, IT, and R&D teams to support internal stakeholders on all aspects of incident prevention and response in data privacy events, including investigations, customer and regulatory notifications, contractual obligations, and legal risk mitigation.
• You will develop, implement and engage in ongoing enhancements of playbooks, checklists, decision trees, process flows, toolkits, template documentation (including notification letters) and training for members of the teams engaged on privacy incidents to help drive high quality, accurate, efficient, well documented, consistent and actionable legal analysis and advice around privacy incidents globally.
• You will review facts, relevant laws, rules and regulations, and applicable legal analysis to ensure that consideration has been given to all appropriate factors in identifying and assessing the need to make, and the manner of making, individual, regulatory and/or contractual notifications concerning data privacy and/or security incidents, and supporting stakeholders’ implementation of Legal’s recommendations.
• You will support and use technologies and software to assist in the handling, analysis, documentation and resolution of incidents.
• You will engage with the IT and R&D cybersecurity teams at Dexcom on legal compliance matters including providing legal support to reviews of cybersecurity laws and regulations, like the EU NIS-2 Directive and HIPAA Security Rule
• Assisting with other projects within the Global Privacy team as requested and when time permits.

What makes you successful:

• 8+ years privacy and data protection experience at a law firm or in-house, preferably in regulated industries (life sciences, healthcare, or technology).
• Must have a proven background in privacy incident response, including investigations, notification determinations, compliance assessments, deploying industry-leading technologies and software solutions, and assisting with remediation and communication matters.
• Experience managing cybersecurity compliance issues is strongly preferred.
• CIPP and/or other data privacy certifications is preferred.
• Ability to work independently with minimal supervision in a fast-paced and high-volume practice, prioritize competing demands, and problem solve creatively.
• JD admitted to a US state