(Senior) Expert (m/f/d) – Technical Privacy

Fresenius Medical Care North America; Remote; EUR 80.000 - 110.000; Vollzeit

Zusammenfassung

A leading healthcare technology organization in Germany is seeking a Senior Expert in Technical Privacy to ensure that technology systems comply with GDPR and global privacy regulations. This role involves implementing privacy-by-design principles, developing regulatory frameworks, and working with cross-functional teams. Ideal candidates will have experience in privacy architecture, a deep understanding of GDPR requirements, and excellent communication skills to convey complex privacy concepts effectively.

Qualifikationen

• Experience as Privacy-by-Design Architect, Technical Privacy Lead, or Privacy Engineer.
• Hands-on understanding of privacy-by-design and privacy-by-default.
• Knowledge of GDPR technical requirements.
• Ability to operate in rapidly evolving regulatory environments.

Aufgaben

• Own privacy-by-design principles across product development.
• Develop frameworks to meet GDPR, HIPAA, and related regulations.
• Build robust privacy engineering toolbox.
• Translate regulatory requirements into technical designs.
• Lead privacy impact assessments from a technical perspective.

Kenntnisse

Privacy-by-Design principles

Privacy-by-Default principles

Communication skills

Analytical skills

Problem-solving skills

Ausbildung

CIPP/E, CIPT, CIPM, CDPSE, CISSP, CDPO certifications

Tools

Privacy engineering toolbox

GDPR compliance frameworks

Jobbeschreibung

We a re seeki n g for a ne w team member as ( Senior) Expert – Technical Privacy to ensure that our technology systems, digital pr oducts , and data proces sing workflows are designed and operated in full alignment with GDPR and global privacy regulations. In this role, your primary focus will be the practical implementation of privacy-by-design and privacy-by-default principles across our technology landscape. A deep knowledge of curr ent and up coming regulatory standards will allow you to enab le prod uct team s to build future proof products. You will work closely with engineering, product, le gal and security teams to embed privacy into architectures , processes, and system behavior from the scratch . Strong interpersonal skills ar e esse ntial to communicate your solution to relevant other stakeholders in our organization.

Your Responsibilities:

• Own and operationalize privacy-by-design and privacy-by-default across all stages of the product development lifecycle from concept and architecture to development, deployment, and maintenance.

• Develop technical frameworks, design patterns, and implement standar d and guidelines to ensure systems and applications inherently meet GDPR, HIPAA, EU Data Act, EU AI Act, and related regulatory requirements.

• Build and maintain a robust privacy engineering toolbox , including solutions for encryption, pseudonymization, data minimization, access governance, and secure data storage and transfer.

• Work with product owners and architects to translate regulatory requirements into concrete technical designs , system requirements, and acceptance criteria.

• Lead privacy impact assessments from a technical design perspective , identifying risks and defining mitigating controls.

• Mentor engineering teams on privacy-preserving design principles, coding standards, and architectural best practices.

• Be at the forefront of new regulations and standards to anticipate early requirements for our products.

• Serve as the technical authority for privacy topics , supporting audits, compliance assessments, and regulatory inquiries.

• Act as a cross-functional interface for Legal, Security, Quality, Engineering, and business functions to ensure alignment and clear communication.

Your Profile:

• Proven experience in a role such as Privacy-by-Design Architect, Technical Privacy Lead, Privacy Engineer, or Privacy Architect .

• Deep, hands-on understanding of privacy-by-design and privacy-by-default , with proven experience implementing these principles in real-world systems and cloud environments.

• Strong knowledge of GDPR technical requirements , including data minimization, purpose limitation, security of processing, data lifecycle management, and DSR enablement.

• Demonstrated ability to learn quickly , grasp daily operations and deliverables , and adapt to a rapidly evolving regulatory environment .

• Expertise in systems architecture , cloud platforms, and privacy-enhancing technologies (PETs).

• Experience with compliance frameworks such as ISO/IEC 27001 , SOC2, or comparable standards.

• Familiarity with tools and systems that support data subject rights , consent management, and auditability.

• Certifications such as CIPP/E, CIPT , CIPM, CDPSE , CISSP, CDPO or equivalent are a plus.

• Strong analytical, problem-solving, and critical-thinking strengths.

• Excellent communication skills, capable of explaining complex technical privacy concepts to a broad audience.

• Strong interpersonal and negotiation skills for managing diverse and challenging opinions .

• Excellent organizational skills and the ability to operate effectively in ambiguous environments while taking initiative and owning responsibilities .