Privacy Officer - Inmar, Inc.

Position Summary: Reporting to the Vice President, Regulatory & Compliance, the Privacy Officer (PO) is responsible for the development and implementation of privacy policies and practices across the enterprise. The PO will work closely with senior management, Legal, Product Teams, Engineering, Data Governance and Security teams to ensure that the company's data handling practices comply with all applicable privacy laws and regulations in the United States and globally, including those covering PII and PHI (e.g., HIPAA, GLBA, CPRA, MHMDA, PIPEDA, GDPR, etc). The PO will also oversee the company's privacy program, including data protection, and support incident response strategies.  They will spearhead the Inmar Privacy Protection Steering Committee on a regular interval, execute executive leadership updates, resolve outstanding decisions and go-forward objectives.
This position can be hybrid to Winston Salem, NC or remote.

Major Responsibilities/Essential Functions: 

Project Management (70%)

• Act as the primary point of contact for data subjects, regulatory authorities, and other stakeholders on issues relating to privacy.
• Manage customer, employee, and partner inquiries related to privacy policies and practices.
• Oversee and support Privacy Managers in implementing division-specific privacy strategies.
• Oversee privacy managers working with product development teams to ensure privacy by design principles are being followed during the product development process.
• Ensure company privacy notices remain current in light of changing laws and company strategies.
• Collaborate with privacy managers to review privacy provisions across a diverse range of agreements, ensuring that our commitments are not only within our operational capabilities but also align with our strategic intentions to uphold data protection and privacy standards.
• Oversees the implementation of third-party privacy compliance technology
• Collaborate with key stakeholders (Data Governance, Product Teams, Engineering, Security) to perform data mapping to understand data flows and identify areas for strengthening data protection.
• Coordinate with Data Governance and information Security teams to ensure alignment between security measures and privacy policies.
• Lead privacy impact assessments and risk management processes across the company.

Strategic (30%)

• Develop and implement the company's global privacy strategy and policy.
• Stay abreast of emerging privacy laws and regulations, analyzing their impact on business operations and leading the adaptation process.
• Develop and deliver privacy training programs to foster a culture of privacy awareness and compliance throughout the organization.
• Create an effective, centralized, organization-wide DASR response & reporting process, and work closely with the Manager of Privacy to develop solutions to comply with DASR requests

Required Qualifications:

• Bachelor’s Degree in Law, Information Technology, Business Administration or a related field required.
• Master’s degree or JD highly preferred
• 10 years of experience in privacy, legal, compliance or a related field, with a least 5 years in a corporate leadership role; or any equivalent combination of experience and training that provides the required knowledge, skills, and abilities needed to complete the major responsibilities/essential functions of the position
• In-depth knowledge of United States and global privacy laws and regulations, including GDPR, PIPEDA, CPRA, ISO standards, and HIPAA.
• Possesses a robust understanding of data privacy contractual clauses, including the intricacies of drafting, negotiating, and implementing provisions that ensure compliance with applicable privacy regulations.
• Certified Information Privacy Professional (CIPP) or equivalent certification is strongly preferred.
• Strong leadership, communication, and project management skills.
• A business mindset that demonstrates a proven track record of leveraging privacy as a team-oriented business enabler rather than viewing it solely as a compliance requirement. This includes the ability to identify opportunities for privacy to enhance customer trust, create competitive advantages, and support innovation.

Individual Competencies:

• Integrity:  Gains the trust of others by taking responsibility for own actions and telling the truth. Follows through on commitments and agreements; Respects confidentiality; Maintains confidentiality regardless of pressure from others.

• Communication:  Giving and receiving messages and information in written, oral, and visual formats concisely for a complete understanding of meaning and intent.
• Collaboration: Works collaboratively with others to achieve group goals and objectives.
• Effective Execution: Gathers and analyzes information to generate and evaluate potential solutions to problems, issues and challenges while weighing the accuracy and relevance of the facts, data and information.

• Vision and Strategy: Takes a long-term view and builds a shared vision with others while positioning the organization for future success by identifying new opportunities, formulating objectives and priorities, and implementing plans consistent with the long-term interest of the organization in a global environment.
• Influence: Persuades or convinces others to support an idea, agenda, or direction through establishing credibility, using data and facts for support, directly addressing a person's concerns or issues, and making connections while wielding power and authority in an effective and fair manner.
• Business Acumen: Understands and is aware of how to think about and successfully make the right business decisions through the utilization of industry-specific knowledge and skills and strategic thinking tools and skills.
• Judgment: The ability to combine personal qualities with relevant knowledge and experience to form opinions and make decisions.  It is what enables a sound choice in the absence of clear-cut, relevant data or an obvious path.  It is the exercise of critical thinking, analysis and assessment of implications, identification of patterns, making connections of underlying issues, and the ownership of the outcome.

The physical demands described here are representative of those that must be met by an associate to successfully perform the major job responsibilities (essential functions) of this job.  Reasonable accommodations may be made to enable individuals with disabilities to perform the major job responsibilities. This job description is not intended to be an exhaustive list of all duties, responsibilities, or qualifications associated with the job. Duties responsibilities and activities may change, or new ones may be assigned at any time with or without notice.

While performing the duties of this job, the associate is: 

• Regularly required to use hands to finger, handle or feel objects, tools or controls, and reach with hands or arms.
• Regularly required to talk or hear and read instructions on a computer monitor and/or printed on paper.
• Occasionally required to stand, kneel or stoop, and lift and/or move up to ## pounds.
• Regularly required to view items at an extremely close range and must be able to adjust and readjust focus.
• Occasionally required to remain in a stationary position.

• Put clients first and consistently display a positive attitude and behaviors that demonstrate an awareness and willingness to listen and respond to clients in order to meet their short-term and long-term needs, requirements and exceed their expectations.
• Treat clients and teammates with courtesy, consideration and tact; you also can perceive the needs of internal and external clients and communicate effectively with the objective of delighting and retaining the client.
• Build collaborative relationships and work cooperatively with others, inside and outside the organization, to accomplish objectives, develop and maintain mutually beneficial partnerships, leverage information and achieve results.
• Set and attain achievable, yet aggressive, goals with a sense of urgency and accountability.
• Understand that results are important and focus on turning mission into action to achieve results following the principles of agile, dynamic execution while consistently complying with quality, service and productivity standards to meet deadlines and exceed expectations by giving our clients the best possible outcome.
• Support a safe work environment by following safety rules and regulations and reporting all safety hazards.

#LI-BA1

#LI-REMOTE