Privacy Compliance Manager

In collaboration with Privacy, Legal and IT, develop and review relevant data privacy program policies and support documentation related to information and privacy, centralizing processes and putting in place robust, time-bound implementation plans where necessary. Perform scans across the global privacy environment to stay well informed on emerging global regulatory requirements, trends and best practices related to data privacy. Review and negotiate customer and vendor data processing agreements. Develop annual privacy training and deliver it to global staff. Serve as a subject matter expert in developing and implementing a robust regulatory and contractual compliance plan for information received, stored, used or shared by Cytel. Identify opportunities for developing practices, guidelines and training tools to be deployed within or across business units. Coordinate and develop reports to inform Privacy and senior leadership of information and privacy related developments and potential/anticipated impacts. Partner with all key business areas to ensure data privacy risks and compliances are considered at the outset of new projects, service offerings, products and initiatives. Respond to inquiries and issues relating to data privacy practices, withdrawal of consent, the right to be forgotten, and related rights. Participate in corrective and preventive actions (CAPA) related to information governance incidents. Ensure that systematic compliance audits are undertaken and that their findings are reported and acted upon.

Develop and implement an innovative comprehensive data governance framework that drives business growth and improves operations. Coordinate with legal, data strategy, security, operations, and product/engineering teams to monitor data practices, conduct risk assessments, and ensure compliance. Create and maintain corporate wide data flow diagrams to ensure ongoing compliance.

Qualifications

• Education: Law degree preferred or Bachelor of Science or university degree in relevant field such as Privacy or Information Management. Professional designation from the International Association of Privacy Professionals.
• Experience: Minimum of 5-10 years of experience managing data privacy issues in a global environment. Deep knowledge of data privacy, data handling and data classification. Experience with Clinical Research Organization or comparable organization handling health data.
• Skills: Excellent knowledge of Data Governance and Data Quality. Experience in developing and implementing data governance frameworks, policies, and procedures. Strong understanding of data governance best practices, including data quality, data security, and data compliance. Demonstrated self-starter, able to work in a very fast-paced, changing environment with the ability to juggle several priorities at the same time. Exceptional communication skills, with the ability to communicate complex issues in a concise and simple way. Interact professionally and maturely with internal and external stakeholders at all levels to influence positive outcomes. Exceptional drive and commitment to client services with the ability to quickly gain trust and credibility with all stakeholders. Sound business judgment with the ability to escalate legal issues when needed.