SUMMARY:
The Manager, Privacy and Governance works in collaboration with the Sr. Director, Compliance to manage the development of on-going domestic and international privacy-related initiatives at Baylor Genetics, ensuring adherence to federal, state, international and local laws. This role supports the Compliance Office’s functions of maintaining and maturing BG’s privacy program to include support of program framework, standards and policies. The individual in this position also assists in the management of compliance reporting requirements and participates in the development and maintenance of auditing and monitoring process. This role requires managing multiple, concurrent project and task assignments, placing proper priorities on tasks and attention to detail to follow through all assignments to completion.
DUTIES AND RESPONSIBILITIES:
- Develop and provide Data Privacy training to Baylor Genetics' employees.
- Responsible for providing oversight and guidance on data privacy-related initiatives and subject matter expertise on domestic and international privacy laws and regulations.
- Understand the flow of information and how that information is utilized and use that knowledge to support the integrity of the data privacy compliance program.
- Working knowledge of how IT applications, infrastructure and architecture can be adapted to reduce data privacy risk.
- Assess third-party supplier and vendor relationships by ensuring privacy risks are evaluated and mitigated, contracts include appropriate privacy controls and Business Associate requirements are documented, as applicable.
- Conduct DPAs, PIAs and 3rd-party vendor data privacy/security risk assessments. Collaborate with Enterprise Technology team to complete data mapping, access and inventory controls.
- Work collaboratively with the IT Security Officer to ensure continuous alignment between cybersecurity and privacy compliance programs (including policies, practices, and programs).
- Assist in implementation and management of AI Governance Program, ensuring appropriate controls to maintain the privacy of data.
- Work collaboratively with various business units to embed privacy related requirements within new and existing processes, projects and teams.
- Draft and update policies, notices, and standard operating procedures related to data privacy/security and oversee privacy governance across the organization.
- Develop, conduct and report on privacy/security monitoring activities, including monitoring of tracking technologies used for digital marketing.
- Support the Sr. Director of Compliance during internal/external privacy audits and/or external government investigations. Assist the Sr. Compliance Director in the design and implementation of appropriate controls to mitigate identified risks.
- Work with Human Resources to ensure consistent application of any necessary corrective actions and sanctions related to non-compliance.
- Assist in preparation of materials and participate in the BG Compliance Committee, as well as other meetings requested by the Sr. Director of Compliance.
- Administer a process for investigating and responding to privacy complaints and data breaches to meet international and domestic law.
- Manage and report on the Ethics and Compliance Hotline metrics.
- Maintain and document all Compliance activities and communications to support Compliance & Privacy efforts.
- Stay abreast of regulatory changes, industry trends, and emerging risks, especially with respect to data privacy and security standards.
- Uphold the Code of Conduct as stipulated in Baylor Genetics’ Compliance Program.
EDUCATION/EXPERIENCE:
- Bachelor's degree in Business Administration, Healthcare Administration, Science, Computer Science or a related field.
- Three to Five years of demonstrated experience with international and domestic data privacy and/or security laws and regulations.
- Preferred certification as CIPM, CIPT, CDPSE, IAPP, or similar data privacy certification.
- Previous compliance experience in a health care environment, preferably in a clinical laboratory setting.
- Preferred experience with LIMS, Epic, and MS Co-pilot.
- Proficient with Microsoft Office tools, including Excel, Powerpoint and Word.
EEOC STATEMENT:
We are committed to equal employment opportunities and welcome applications from candidates regardless of race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or veteran status.
This job description outlines the responsibilities, qualifications, and EEOC statement pertinent to the Manager, Regulatory & Compliance role at Baylor Genetics, emphasizing support for the Compliance and privacy program in compliance with pertinent federal, state, and local regulations.