Associate Counsel Manager – Retirement Services
Vanguard
Senior Privacy Specialist, Corporate Counsel
Thermo Fisher Scientific
full-time
Posted on:
Location: North Carolina • 🇺🇸 United States
Visit company websiteJob Level
Senior
Tech Stack
Unity
About the role
- Maintain organizational consistency with privacy and data security regulations globally
- Lead and take ownership of multiple projects; work independently and escalate concerns when appropriate
- Provide clear, actionable legal guidance on global data protection laws and standards (GDPR, CCPA/CPRA, HIPAA)
- Draft, review, and negotiate data protection terms in global agreements, including client/vendor contracts and BAAs
- Identify and analyze potential privacy risks; assist in conducting DPIAs and risk evaluations
- Collaborate on privacy-by-design initiatives for technology, digital health tools, and AI systems
- Work with Legal, IT, and Commercial teams to integrate privacy into systems and processes
- Advise on and manage subject access requests and individual rights lifecycle under applicable privacy laws
- Support the HIPAA Privacy Officer in implementing and maintaining HIPAA-compliant policies, procedures, and training
- Monitor legal developments and provide timely updates to business partners and legal colleagues
- Share knowledge and develop standard methodology across the Global Privacy and Technology Office (GPTO)
Requirements
- Juris doctorate degree or equivalent
- Active license to practice law in at least one jurisdiction
- Certifications such as IAPP (CIPP/E, CIPP/US, CIPM) desirable
- Fluency in business English; proficiency in other languages a plus
- 4–6 years of experience safeguarding information and upholding privacy laws
- Preference for experience in a multinational corporation or regulated sector (pharmaceutical/clinical research)
- Strong grasp of global privacy frameworks (e.g., GDPR, CCPA/CPRA, HIPAA) and data transfer mechanisms (SCCs, TIAs)
- Experience performing/advising on DPIAs, TIAs, or HIPAA Security Risk Assessments
- Proven skill coordinating complex projects with multiple collaborators across jurisdictions
- Skilled in simplifying legal issues and presenting risk in business-friendly terms
- Familiarity with privacy management platforms such as TrustArc or OneTrust
- Self-starter with strong judgment, collaborative mentality, and passion for continuous learning
