Privacy Operations Associate Director

Vertex Pharmaceuticals (San Diego) LLC; Boston (MA); Hybrid; USD 168,000 - 254,000; Full time

Job summary

A global biotechnology company is seeking a Privacy Operations Associate Director to manage privacy-related efforts, including compliance and risk assessment. The ideal candidate will have at least 5 years of experience in Privacy Operations and a strong understanding of data mapping technology. The role offers hybrid flexibility and a competitive salary range of $168,800 - $253,200, along with comprehensive benefits.

Benefits

Annual bonus

Annual equity awards

Generous paid time off

Student loan repayment

401(k) matching

Qualifications

• Typically requires 5 years of experience in Privacy Operations.
• Strong working knowledge of data mapping technology like OneTrust.
• Ability to prioritize workload with minimal supervision.

Responsibilities

• Develop processes to maintain compliance with privacy policies.
• Oversee potential data incident investigations.
• Coordinate with business units to embed privacy within organizational processes.

Skills

Program management

Data mapping technology

Organizational skills

Teamwork

Communication skills

Education

Bachelor's degree

Tools

OneTrust

Job description

**Job Description****General Summary:****Privacy Operations Associate Director****About the Role**The Privacy Operations Associate Director supports the Privacy Operations Director in developing and maintaining the company’s ongoing privacy-related efforts. This role manages the Privacy by Design (PbD) processes, delivers training, oversees potential data incident investigations, and provides solutions-oriented, risk-based advice to internal clients regarding the collection, processing, and storage of personal data.Key responsibilities also include managing metrics and reporting, identifying opportunities for programmatic mitigations and controls, and implementing operational improvements as the company and program expand.**Key Duties & Responsibilities*** **Program Management & Compliance:** Develop and mature processes and procedures to maintain compliance with the Global Data Privacy Policy and applicable data protection laws, regulations, and guidelines.* **Training & Awareness:** Develop and review content for training materials, guidance documents, and communications to increase employee understanding of privacy policies, data handling practices, legal obligations, and best practices.* **Process Ownership:** Serve as the primary owner for the design and maintenance of the Data Inventory, Triage, Assessment, and Data Protection Impact Assessment (DPIA) processes.* **Risk Assessment & Mitigation:** Perform regular privacy assessments of low and medium-risk business processes, providing practical and timely advice to internal clients to ensure compliance while protecting the company’s integrity and reputation.* **Stakeholder Collaboration:** Work with the network of "Super Users" and "Privacy Champions" (individuals embedded in the business) through regular touchpoints, training, and strategic direction. Assist process owners and Super Users in completing data inventories and DPIAs, coordinating with the business and the global Data Protection Officer (DPO) to mitigate residual risks.* **Vendor Risk Management:** Mature the vendor privacy and security risk management process with the Third Party Risk Management (TPRM) team to ensure vendors with access to personal data are appropriately vetted.* **Monitoring & Auditing:** Support the monitoring and auditing plan for compliance with internal data protection policies and processes, coordinating with Internal Audit, the Office of Business Integrity and Ethics, or external auditors.* **Incident & Request Response:** Support the process for responding to data subject requests and reports of potential data incidents (in coordination with Privacy Counsel and Litigation).* **Metrics & Reporting:** Maintain and enhance privacy program metrics and reporting, driving the implementation and maintenance of appropriate reporting tools (e.g., Tableau).* **Privacy by Design (PbD):** Coordinate with business units to embed privacy triggers within organizational processes, such as the Software Development Lifecycle (SDLC), to proactively integrate privacy across the organization.* **Technology & Tools:** Work with the data technology & engineering team to identify and employ internal tools to strengthen operational processes and implement improved programmatic mitigations and controls.* **Regulatory Intelligence:** Keep abreast of global privacy developments (e.g., EU guidance, US state laws, e-privacy developments) and proactively anticipate changes needed for the global privacy program.**Required Qualifications****Education*** Bachelor's degree**Experience*** Typically requires 5 years of experience in Privacy Operations within a company or as an external advisor.* Strong working knowledge of data mapping technology (e.g., OneTrust or similar tool).* Demonstrable program management skills, including strong organizational and multi-tasking abilities.* Ability to prioritize workload and projects with minimal supervision.* Demonstrated teamwork and collaboration skills.* Exceptional written, oral, and presentation skills.#LI-DB1#HYBRID**Pay Range:**$168,800 - $253,200**Disclosure Statement:**The range provided is based on what we believe is a reasonable estimate for the base salary pay range for this job at the time of posting. This role is eligible for an annual bonus and annual equity awards. Some roles may also be eligible for overtime pay, in accordance with federal and state requirements. Actual base salary pay will be based on a number of factors, including skills, competencies, experience, and other job-related factors permitted by law.At Vertex, our Total Rewards offerings also include inclusive market-leading benefits to meet our employees wherever they are in their career, financial, family and wellbeing journey while providing flexibility and resources to support their growth and aspirations. From medical, dental and vision benefits to generous paid time off (including a week-long company shutdown in the Summer and the Winter), educational assistance programs including student loan repayment, a generous commuting subsidy, matching charitable donations, 401(k) and so much more.**Flex Designation:**Hybrid-Eligible Or On-Site Eligible**Flex Eligibility Status:**In this Hybrid-Eligible role, you can choose to be designated as: 1. **Hybrid**: work remotely up to two days per week; **or select** 2. **On-Site**: work five days per week on-site with ad hoc flexibility.Note: The Flex status for this position is subject to Vertex’s Policy on Flex @ Vertex Program and may be changed at any time.#LI-Hybrid**Company Information**Vertex is a global biotechnology company that invests in scientific innovation.Vertex is committed to equal employment opportunity and non-discrimination for all employees and qualified applicants without regard to a person's race, color, sex, gender identity or expression, age, religion, national origin, ancestry, ethnicity, disability, veteran status, genetic information, sexual orientation, marital status, or any characteristic protected under applicable law. Vertex is an E-Verify Employer in the United States. Vertex will make reasonable accommodations for qualified individuals with known disabilities, in accordance with applicable law.Any applicant requiring an accommodation in connection with the hiring process and/or to perform the essential functions of the position for which the applicant has applied should make a request to the recruiter or hiring manager, or contact Talent Acquisition at [e-mail]