Associate Director, Privacy Counsel

TRU is seeking an Associate Director, Privacy Counsel to join a dynamic genomic technology organization. This role can be based in San Diego, CA, Bay Area, CA, or Madison, WI with a flexible, hybrid schedule. The Associate Director will work closely with cross-functional teams such as legal, product development, and compliance to develop and monitor policies and procedures applicable to the business and in compliance with global privacy and data privacy laws and regulations. IAPP certifications and experience with HIPAA are highly preferred.

Essential Duties and Responsibilities:
In this role, you will work closely with the Legal, Product Development, Compliance and Information Security functions to develop and monitor policies and procedures applicable to the business and in compliance with global privacy and data privacy laws and regulations. Duties will include:

  • Counsel and collaborate with multiple internal clients across the business to advise on applicable data privacy law issues
  • Provide counsel related to advanced and cutting-edge data use as well as data mapping, classification, and related data management and governance
  • Partner with product leaders to develop and drive a holistic privacy strategy across products
  • Develop and implement principles and frameworks for building privacy and other responsible innovation topics into the product development process
  • Work with product leadership to identify, escalate, and resolve tension between product objectives and privacy principles
  • Help establish and direct long-term goals of product and engineering teams as they relate to privacy
  • Collaborate with IT, products and software teams to ensure all systems and procedures comply with all relevant data privacy law, regulation and policy, including in relation to the retention and destruction of data
  • Draft, negotiate, and interpret privacy, security and data use and protection terms in contracts and disclosures, including Data Protection Addendums and Intra Company Agreements, consistent with the business’ strategy and goals
  • Assist in maintaining onward data transfer mechanisms such as Standard Contractual Clauses and other applicable mechanisms
  • Review issues related to Incident Response, customer security questionnaires and security certifications
  • Develop and review Data Protection Impact Assessments (DPIAs) and other internal privacy and data security assessments
  • Review issues related to local marketing and data analytics initiatives
  • Collaborate with other attorneys in the Legal Department as a privacy subject matter expert
  • Stay abreast of, and communicate clearly to non-lawyers, changes to or developments in privacy and data protection laws and regulations and their impact on business operations
  • Promote effective work practices, work as a team member, and show respect for co-workers
  • Identify opportunities for organizational growth and drive creative and scalable improvements

Experience & Education:

  • Law degree from an ABA accredited law school with exceptional academic credentials and a member of a state bar in good standing required
  • Hold at least one Data Protection and/or Privacy certification such as, CIPP, CIPT, ISEB, etc., (preferred)
  • Several years or relevant legal experience
  • Experience with U.S. and EU data privacy laws. Experience in healthcare law, particularly HIPAA, strongly preferred
  • Some years’ experience within a compliance, legal, audit and/or risk function, with recent experience in privacy compliance. Global privacy experience in a multi-national company (medical device, pharmaceutical, or healthcare preferred) or a global law firm
  • Experience in developing policy and compliance training


Your subscription could not be saved. Please try again.
Your subscription has been successful.

Receive job alerts twice per week:

We use Sendinblue as our marketing platform. By Clicking below to submit this form, you acknowledge that the information you provided will be transferred to Sendinblue for processing in accordance with their terms of use