Data Privacy Director

JOB SUMMARY

The company is seeking a Data Privacy Director to help advance and operationalize the enterprise privacy program across our commercial, clinical, and product environments. This is a broad, hands-on leadership role supporting the full range of the Privacy team's work — from privacy impact assessments and regulatory analysis to contract and legal privacy-focused reviews — with a strong business-enablement orientation. This role reports to the Vice President, Data Privacy and partners with cross-functional teams to embed privacy principles throughout the lifecycle of data, technology, and innovation initiatives.  The Director may also provide guidance and mentorship to privacy team members and external resources supporting the program.

The Director will also serve as a key integration point between Privacy and Product, embedding privacy-by-design into product and software development lifecycles and partnering with engineering to make privacy practical and scalable. In partnership with Medical Affairs, Clinical Operations, and Data Sciences (R&D), this leader will also enhance and maintain data governance frameworks that support clinical research initiatives and the responsible use of data for quality improvement and development activities. Together, these efforts will help strengthen the company’s privacy program, building efficient, repeatable processes that expand team capacity while enabling responsible innovation and growth.

Regarding culture, we seek people who demonstrate the company's values, enjoy challenging problems, empower others to thrive, lead by example, and adapt their playbook when necessary.

RESPONSIBILITIES

Privacy Program Enablement

•

Lead privacy impact assessments, regulatory analyses, and risk-based recommendations that balance compliance with business enablement

•

Conduct privacy reviews of contracts and legal engagements, drafting recommendations for counsel review, alignment, and approval

•

Apply a risk-based lens to enable business decisions

•

Build efficient, repeatable processes and tooling that scale program capacity within a resource-constrained team

•

Provide direction and mentorship to team members and external resources as the program scales

Privacy Integration & Engineering

•

Serve as the integration point between Privacy and Product/Engineering, embedding privacy-by-design into product and software development lifecycles

•

Partner with technical teams to translate privacy requirements into practical controls, patterns, and reusable technical solutions

•

Support privacy engineering practices that operationalize compliance without slowing delivery

Data Use Governance & Decision Frameworks

•

Implement standardized, risk-based frameworks for data access, sharing, secondary use, and commercial/partnership data usage

•

Drive consistency in how data use decisions are evaluated, approved, and documented across the organization

Data Ethics & Responsible Data Use

•

Operationalize guardrails for use of sensitive and regulated data, AI/ML training data, and advanced analytics

•

Embed ethical considerations into governance processes and decision-making

Commercial & Clinical Data Ecosystem Governance

•

Govern data flows and usage across marketing/advertising technologies, commercial partnerships, and third-party data sharing

•

Serve as the embedded privacy partner for Medical Affairs and Clinical Operations, advising on privacy requirements for clinical research protocols, clinical trials, real-world evidence studies, and secondary use of clinical data

•

Collaborate with Clinical Operations to ensure data flows and consent frameworks align with applicable regulations (HIPAA, IRB requirements, GCP guidelines) and internal governance standards

•

Support privacy for clinical research, clinical trials, and secondary research use of data

•

Enable business teams to leverage data responsibly while minimizing regulatory and reputational risk

QUALIFICATIONS

•

Bachelor’s Degree in a related field (e.g., law/legal studies, information systems, business administration, data analytics); IAPP certification highly preferred (e.g., CIPP, CIPT, AGCP)

•

8-10 years of experience in privacy, data governance, compliance, or related disciplines, with increasing leadership responsibility

•

Strong expertise in global privacy regulations (HIPAA, GDPR, CCPA/CPRA, etc.)

•

Experience embedding privacy into product and software development lifecycles (privacy-by-design, privacy engineering)

•

Experience supporting clinical research or clinical trials from a privacy perspective, including working directly with Medical Affairs, Clinical Operations, or similar teams

•

Familiarity with IRB processes, informed consent frameworks, and Good Clinical Practice (GCP) as they relate to data privacy

•

General healthcare compliance background (e.g., fraud, waste & abuse, Stark Law, Anti-Kickback Statute, Sunshine Act)

•

Experience working across commercial, clinical, and product/technology environments

•

Familiarity with AI/ML and advanced analytics governance concepts as they relate to data use and ethics

•

Proven ability to translate complex regulatory requirements into practical, scalable processes

•

Strong ability to influence and align senior stakeholders across functions

•

Experience leading, mentoring, or managing privacy professionals or cross-functional teams

•

Experience with program management and collaboration tools (e.g., JIRA, Google Workspace)

IDEAL CANDIDATE PROFILE

•

A systems thinker who connects fragmented processes into cohesive, scalable solutions

•

A bridge-builder across technical, legal, and business domains— including Medical Affairs and Clinical Operations

•

Effective in complex environments and able to build structure and alignment across stakeholder groups

•

Passionate about responsible data use and enabling growth through pragmatic privacy

The pay range is listed and actual compensation packages are based on a wide array of factors unique to each candidate, including but not limited to skill set, years & depth of experience, certifications and specific office location. This may differ in other locations due to cost of labor considerations.

Remote USA

$170,000 — $240,000 USD

OUR OPPORTUNITY

The company™ is a global leader in cell-free DNA (cfDNA) testing, dedicated to oncology, women’s health, and organ health. Our aim is to make personalized genetic testing and diagnostics part of the standard of care to protect health and enable earlier and more targeted interventions that lead to longer, healthier lives.

The company team consists of highly dedicated statisticians, geneticists, doctors, laboratory scientists, business professionals, software engineers and many other professionals from world-class institutions, who care deeply for our work and each other. When you join the company, you’ll work hard and grow quickly. Working alongside the elite of the industry, you’ll be stretched and challenged, and take pride in being part of a company that is changing the landscape of genetic disease management.

WHAT WE OFFER

Competitive Benefits - Employee benefits include comprehensive medical, dental, vision, life and disability plans for eligible employees and their dependents. Additionally, the company employees and their immediate families receive free testing in addition to fertility care benefits. Other benefits include pregnancy and baby bonding leave, 401k benefits, commuter benefits and much more. We also offer a generous employee referral program!

For more information, visit [link for members] .

The company is proud to be an Equal Opportunity Employer. We are committed to ensuring a diverse and inclusive workplace environment, and welcome people of different backgrounds, experiences, abilities and perspectives. Inclusive collaboration benefits our employees, our community and our patients, and is critical to our mission of changing the management of disease worldwide.

All qualified applicants are encouraged to apply, and will be considered without regard to race, color, religion, gender, gender identity or expression, sexual orientation, national origin, genetics, age, veteran status, disability or any other legally protected status. We also consider qualified applicants regardless of criminal histories, consistent with applicable laws.

If you are based in California, we encourage you to read this important information for California residents.

Link: [link for members]

Please be advised that the company will reach out to candidates with a @ the company  email domain ONLY. Email communications from all other domain names are not from the company or its employees and are fraudulent. The company does not request interviews via text messages and does not ask for personal information until a candidate has engaged with the company and has spoken to a recruiter and the hiring team. The company takes cyber crimes seriously, and will collaborate with law enforcement authorities to prosecute any related cyber crimes.

For more information

• BBB announcement on job scams
• FBI Cyber Crime resource page