The Privacy Manager will lead the development, implementation, and enforcement of privacy policies and practices within the division. This
role will work closely with the division's Legal, Data Governance, Product, Engineering and Security teams to ensure compliance with
applicable privacy laws and regulations related to personal identifiable information.
Primary Accountabilities:Project Management
- Implement, oversee, and monitor privacy policies and practices to ensure compliance specific to personally identifiable information within division.
- Implement full visibility, documentation, tracking and change management of PII and PHI metadata across onsite and offsite data locations (storage, third-parties, etc.) to ensure compliance with DSAR requirements.
- Build and maintain data asset inventory within the division.
- Collaborate with Privacy Officer and any necessary internal teams to align divisional privacy strategies with the company's overall privacy program and strategy.
- Work with Privacy Officer in implementing and maintaining the division's privacy policies and procedures to comply with relevant domestic and international laws.
- Conduct privacy impact assessments and risk management activities within the division and manage regular audits for compliance, corrective action plans and enforce when non-compliance occurs.
- Work closely with departments across the organization (Product Teams, Data Governance, Legal, Compliance, Operations, Security, etc.) to integrate privacy considerations into workflows and technology systems. This includes working with Product Teams to ensure privacy by design principles are being
- followed during the product development process.
- Responsible for the development and onboarding of privacy-enhancing technologies and practices.
Administrative- Provide privacy training and awareness to division employees.
- Respond to privacy-related inquiries from employees, clients, consumers, and regulatory authorities.
- Serve as the point of contact for privacy-related inquiries from customers, employees, and external parties for the division.
- Manage data access requests, deletion requests, and privacy-related complaints in a timely and compliant manner.
- Review data processing addendums for the division.
- Assist legal team in reviewing and revising Business Associate Agreements
- Track developing state laws and regulations related to personal health information and advise stakeholders within the division at regular intervals regarding the same.
Additional Responsibilities:- Performs other duties as assigned
- Complies with all policies and standards
Required Qualifications:
- Bachelors Bachelor's Degree in Law, Information Systems, Business Administration or a related field required required
- 4-6 years 5 years of experience in privacy, compliance or a related field, with a focus on PII; or any equivalent combination of experience and training that provides the required knowledge, skills, and abilities needed to complete the major responsibilities/essential functions of the position required
- Experience with privacy by design concepts and working with business partners to integrate compliance into projects and separate phases of product lifecycles.
- Experience in conducting data mapping exercises to identify how data flows through the organization, ensuring alignment with
- privacy regulations and identifying areas for enhancing data protection measures.
- Experience using privacy and security software to manage data access requests, deletion requests, and privacy-related complaints in a timely and compliant manner.
- Excellent interpersonal, communication, and project management skills.
- Demonstrates a strong willingness and ability to learn and grow in the role as regulations evolve and challenges arise.
- Proven ability to deliver pragmatic, business-friendly privacy solutions that balance regulatory requirements with operational efficiency, avoiding a one-size-fits-all approach and tailoring strategies to meet the unique needs of the business.
- Strong grasp of data privacy contractual clauses
