Certified Information Privacy Professional

FASTNET STAFFING INC.
New York, NY, United States
13 days ago
Apply on www.indeed.com
Prepare application

Role details

Contract type
Temporary contract
Employment type
Full-time (> 32 hours)
Experience level
Expert
Experience required
3 years minimum
Compensation
$208,000.0 - $235,040.0
Working hours
Regular working hours
Job source

Tech stack

Microsoft Word Microsoft Excel Data Retention PC Tools Microsoft PowerPoint

Job description

  1. subject matter expertise (10+ years) in U.S. privacy law, TCPA, HIPAA
  2. contract review
  3. DPIA review
  4. Privacy notice drafting
  5. incident investigation Non-Privacy Skills / Requirements, 3. The position serves as a key business enabler and provides direct support to business operations including reviewing and advising on contracts, enhanced and expanded patient and consumer communication initiatives, privacy and compliance support for the Team Vision acquisition reviews, support for Oakley R&D initiatives and many other business initiatives, technology implementations, investigations, and risk mitigation activities

  6. This resource supports all brands and businesses in North America (with the exception of EyeMed) and is a key partner to other shared services and business functions 5continues to process substantial volumes of consumer, employee, patient, and other sensitive personal information across multiple business lines. Given the increasing pace of privacy regulation and enforcement activity, sustained oversight is necessary to successfully navigate these requirements, The Sr. Manager - Compliance will assist with all ongoing activities related to the development, implementation, and adherence to the Company’s privacy and compliance programs in North America. This includes compliance with state and federal privacy regulations and the Company’s internal privacy policies and procedures as well as obligations related to anti-bribery, anti-competition, anti-money laundering and economic sanctions, whistleblowing requirements., * Establishes and oversees strategic privacy program including developing and implementing policies/processes that enable effective privacy and compliance practices.
  • Oversees continued compliance with the HIPAA privacy program including monitoring compliance with regulatory requirements and enhancing, improving and revising the program as needed
  • Manages ongoing compliance with the CCPA and CPRA privacy program including monitoring compliance with regulatory requirements and enhancing, improving and revising the program as needed
  • Implements U.S. state privacy law program for Colorado, Virginia and Utah - including new regulatory requirements
  • Develops and ensures adherence to policies and standard operating procedures for the privacy & compliance programs.
  • Establishes ongoing process to investigate and report inappropriate access and disclosure of PII and PHI.
  • Establishes and administers a process for receiving, documenting, tracking, investigating and taking action on all complaints concerning Company’s privacy practices.
  • Develops privacy notices for North American web real estate and apps.
  • Manages privacy complaints, breaches and investigations by regulatory authorities.
  • Manages the identification, implementation, and maintenance of the Company’s privacy and compliance policies & procedures in coordination with Company management and legal.
  • Manages periodic privacy and compliance risk assessments, including mitigation and remediation efforts.
  • Maintains current knowledge of relevant state and federal privacy and compliance regulations applicable to the Company’s operations.
  • Ensures maintenance of appropriate privacy and confidentiality consents, authorization forms and notices reflecting current privacy practices.
  • Designs, manages and deploys effective compliance training, and customized programs for the designated countries and/or targeted teams and leaders
  • Supports in overseeing corrective actions following compliance related audits.

Requirements

  1. Bachelor’s degree
  2. Strong PC skills, to include Microsoft Word, PowerPoint and Excel.
  3. Demonstrated ability to research, interpret and understand laws, privacy laws and regulations.
  4. Strong interpersonal relationships with peers, cross cultural sensitivity, develops others, builds effective teams, managerial courage, motivates others.
  5. High level of integrity with strong ethical core values
  6. Ability to work independently, self-starter Top 3-5 desirable attributes/qualifications?

  7. JD, law license is not required by desirable, * 10+ years of experience in privacy compliance. * Bachelor’s degree * Demonstrated knowledge of, and experience with: * o Privacy laws in N.A., including HIPAA, PIPEDA and U.S. state regulation;o Anti-bribery, anti-competition, anti-money laundering and economic sanctions, whistleblowing;o Document/data retention requirements;o Data privacy compliance and incident management, including implementation of breach response protocol and oversight of regulatory and individual compliance. * Strong PC skills, to include Microsoft Word, PowerPoint and Excel. * Demonstrated ability to research, interpret and understand laws, privacy laws and regulations. * Strong interpersonal relationships with peers, cross cultural sensitivity, develops others, builds effective teams, managerial courage, motivates others. * High level of integrity with strong ethical core values * Ability to work independently, self-starterPREFERRED QUALIFICATIONS * Experience, or a bachelor’s degree, in a healthcare-related field. * Privacy certification, such as Certified Information Privacy Professional (CIPP).

Apply for this position

This job is hosted externally. Click below to view the full posting and apply.

Apply on www.indeed.com
Prepare application

Good distractions

Talks and stories from around this role — technically off-topic, practically not.

3:58 min

Mitigating diverse browser quirks and unsupported clipboard metadata formats

Markus Over Markus Over

1:54 min

Applying strict enterprise design principles for zero data retention

Alexander Wallner Alexander Wallner +3 · World Congress 2024

2:03 min

Platform compliance and security certifications for sensitive data

Chad Carlson · World Congress 2021

2:59 min

Utilizing live captions for context in video meetings

Florian Margaine Florian Margaine · Europe 2026 Virtual

3:17 min

Protecting personal data and privacy during job applications

Chris Heilmann Chris Heilmann +2 · LIVE

46 sec

Maintaining intellectual property safety through zero data retention

Hissan Usmani Hissan Usmani · World Congress 2025

Videos

See all

Related articles

See all