Data Privacy Director

AIM OF THE POSITION

The Director of Data Privacy will provide the leadership, oversight and vision to build, enhance and sustain a comprehensive global privacy program, ensuring organization-wide compliance with all applicable privacy laws and regulations. The Director of Data Privacy will develop, coordinate, and oversee data privacy programs, frameworks, and governance structures, partner with key stakeholders to implement privacy compliance efforts and programs, and design and integrate communications strategies for privacy compliance information and training regarding privacy policies, data-handling policies and procedures, and legal obligations.

POSITION WITHIN THE ORGANIZATION

1. Reports to Chief Compliance Officer

2. Cooperates with all departments

3. Participates in:

* Cross-functional projects and meetings

* Risk assessments and audits

* Education of the workforce on relevant laws and requirements

ESSENTIAL DUTIES AND RESPONSIBILITIES

GENERAL:

* Partner with stakeholders to identify, document, and mitigate privacy risks arising from key business activities (e.g., clinical, research, records retention, billing and client services) and implement work and monitoring planning to continuously improve the data privacy compliance program, governance structure, and frameworks.

* Author policies and procedures to support global data privacy compliance and implement a continuous, comprehensive review process to assess existing data privacy policies and procedures to ensure efficacy, to identify and remediate performance gaps, and to ensure alignment with applicable relevant laws and regulations.

* Design and integrate communication strategies for privacy compliance information and training regarding company privacy policies, data-handling policies and procedures, and legal obligations. Support a mechanism for timely responses to privacy related inquiries. Develop role-specific privacy training course content for target audience(s) and monitor and report on completion of privacy-related training.

* Manage privacy incidents and breach notifications required by relevant laws and serve as the liaison to relevant regulatory bodies. Perform timely investigations ensuring resolution for all privacy-related matters received. Assess metrics and leverage analytics to improve and enhance processes.

* Partner with key stakeholders to implement privacy compliance efforts and programs. Collaborate with information security to ensure operational alignment between security and privacy compliance programs. Lead and participate in privacy related committees to support privacy-related initiatives, address and evaluate emerging risks.

* Collaborate with the Legal Team on the review of legal agreements regarding the collection, protection, transfer, and use of regulated and/or sensitive data, offering guidance on methods to minimize privacy compliance risk.

* In collaboration with Information Security and business partners, coordinate due diligence reviews of vendors that will handle personally identifiable data on behalf of the company to ensure their data protection compliance programs are robust, ensure appropriate data protection agreements are in place, and conduct periodic monitoring of the vendors.

* Maintain current and operational knowledge of applicable global privacy laws and serve as a subject matter expert.

* Manage, develop and mentor privacy team staff both onsite and at remote locations to ensure completion of annual work plans and goals, and the furthering of the team's skills and career ambitions.

The above listing represents the general duties considered essential functions of the job and is not to be considered a detailed description of all the work requirements that may be inherent in the position.

EDUCATION AND EXPERIENCE REQUIREMENTS

EDUCATION

Bachelor's Degree required (preferably in clinical laboratory or life sciences field). Master's degree preferred

EXPERIENCE

* 5+ years of experience implementing and managing global privacy compliance programs (HIPAA, GDPR, CCPA, etc.), writing policies and guidance documents supporting various business activities, developing training, and conducting investigations.

* Professional privacy certification (CHPC, CIPP, CIPM) or similar required.

KNOWLEDGE, SKILLS AND ABILITIES (KSA'S)
Specific Knowledge Required:

Knowledge: Comprehension of a body of information acquired by experience or study.

Skill: A present, observable competence to perform a learned activity.

Ability: Competence to perform an observable behavior.

* Working knowledge of appropriate use of personal information in a clinical study or research setting.

* Ability to foster strong relationship and use collaborative approach to conducting compliance activities.

* Strong research, analytical, and problem-solving skills.

* Ability to manage multiple priorities, projects, and tea, members, as well as adapt to changing business needs in a fast paced and flexible environment.

* Strong communication skills to facilitate interaction with representative across the organization, including executives, department directors/managers, staff and external organizations and agencies. Ability to present complex issues and concepts to audiences of varying expertise in the subject matter (both orally and in writing).

* Ability to maintain the confidentiality of sensitive or private matters while performing job duties and interacting with colleagues.

* Ability to participate in team projects and fill various roles such as team member, facilitator or leader as needed.

BEHAVIOURAL COMPETENCIES/DESIRED SKILLS
* Demonstrates professional, collaborative and positive demeanor

* Strong ability to manage and deescalate conflict

* Active listener who seeks understanding and displays empathy for opposing viewpoints

* PRIVACY NOTICE: To review the California privacy notice, click here: https://agendia.com/privacy-policy/

* Employees must not be classified as an excluded individual who is prohibited from participation in any Federal health care program.

WORKING ENVIRONMENT
Establishes ADA (Americans with Disabilities Act) requirements

ENVIRONMENT/SAFETY/WORK CONDITIONS
Working conditions (inside or outside the office)

* General office environment. Reasonable accommodation may be made to enable individuals with disabilities to perform the essential functions.

* Maintains a clean, neat, and orderly work area.

* Adheres to Department Specific Safety Guidelines.

* Standing, sitting, walking, bending, reaching, manual manipulation, and lifting up to 15 pounds.

TRAVEL
Ability to drive/fly domestically for up to 15%

OTHER DUTIES

Other duties as required by management