Privacy Operations & Assurance Senior Manager

Vertex Pharmaceuticals; Warrington; Hybrid; GBP 70,000 - 90,000; Full time

Job summary

A global biotechnology company is seeking a Privacy Operations & Assurance Sr. Manager to oversee its privacy program. Responsibilities include managing data processing records, executing internal audits for compliance, and creating privacy communications. The ideal candidate will have a Bachelor's Degree and 3-5 years in privacy/data protection, alongside strong organizational and communication skills. This hybrid-eligible role allows remote work up to two days per week.

Qualifications

• 3-5 years of privacy and data protection experience.
• Strong communication skills for effective interactions.
• Ability to manage multiple tasks and prioritize effectively.

Responsibilities

• Manage records of processing activities and privacy assessments.
• Execute internal auditing and monitoring for compliance.
• Draft and manage privacy-awareness communications.
• Coordinate privacy requirements with the Third Party Risk Management team.

Skills

Strong organizational and multi-tasking abilities

Ability to prioritize workload and projects

Demonstrated teamwork and collaboration skills

Effective written, oral, and presentation skills

Education

Bachelors Degree or equivalent relevant experience

Tools

Data automation technology (e.g. OneTrust)

Job description

Job Description

General Summary: The Privacy Operations & Assurance Sr. Manager is an integral part of the Privacy Operations team, supporting the execution and oversight of the global privacy program at Vertex. This role is responsible for providing practical advice to a broad spectrum of internal clients related to records of processing activities and privacy by design, executing our internal auditing and monitoring program and supporting internal communications and events to increase employee understanding of privacy policies and data handling practices. This role also assists in implementing privacy policies and SOPs and supports training initiatives. The Senior Manager helps identify opportunities for operational improvements and supports the growth of the privacy program as the company evolves.

Key Duties and Responsibilities

• Managing the records of processing activities (ROPAs) and triage process for privacy assessments across our International business;
• Assisting business process owners in completing ROPAs and Data Protection Impact Assessment questionnaires (DPIAs) and collaborating with the Global Privacy Office to address residual risks;
• Managing corrective and preventative actions (CAPAs) from DPIAs to closure in a timely manner;
• Advising business process owners on questions related to data retention with respect to the storage of personal data;
• Executing the internal auditing and monitoring program for the global privacy program to measure compliance with data protection policies and procedures;
• Ensuring the Privacy Office is prepared for an Internal Audit conducted by Vertex's Internal Audit function and manage observation responses and CAPAs to timely closure;
• Drafting privacy‑awareness communications and articles and, as part of the Privacy Operations team, overseeing the Privacy Office's pages on Vertex's internal communications platforms and supporting the organization of Vertex's annual Data Privacy Day;
• Coordinating with the Third Party Risk Management (TPRM) team to embed privacy requirements, controls, considerations within the TPRM process and supporting questionnaires, including reviewing and provide privacy guidance to specific responses from vendors in the TPRM Assessment;
• Supporting the development and maintenance of processes and procedures to ensure compliance with Vertex's Global Data Privacy Policy and applicable international data protection laws;
• Assisting in creating and updating training materials, guidance documents, and communications to increase employee understanding of privacy policies and data handling practices; and,
• Staying informed about privacy developments affecting the company and assisting in updating the privacy program to meet evolving regulatory requirements.

Knowledge and Skills

• Strong organizational and multi‑tasking abilities
• Ability to prioritize workload and projects with guidance
• Demonstrated teamwork and collaboration skills
• Effective written, oral, and presentation skills

Education and Experience

• Education: Bachelors Degree or equivalent relevant experience
• Experience: Typically requires 3-5 years of privacy, data protection

Other Requirements

• No specific certifications required, but privacy-related training or certifications (e.g., CIPP/US, CIPM) are a plus.
• Working knowledge of data automation technology (e.g. OneTrust or similar tool).

Flex Designation

Hybrid-Eligible Or On-Site Eligible

Flex Eligibility Status

In this Hybrid-Eligible role, you can choose to be designated as:

• Hybrid: work remotely up to two days per week;
• On-Site: work five days per week on‑site with ad hoc flexibility.

Note: The Flex status for this position is subject to Vertex's Policy on Flex @ Vertex Program and may be changed at any time.

#LI-Hybrid

Company Information

Vertex is a global biotechnology company that invests in scientific innovation.

Vertex is committed to equal employment opportunity and non‑discrimination for all employees and qualified applicants without regard to a person's race, color, sex, gender identity or expression, age, religion, national origin, ancestry, ethnicity, disability, veteran status, genetic information, sexual orientation, marital status, or any characteristic protected under applicable law. Vertex is an E‑Verify Employer in the United States. Vertex will make reasonable accommodations for qualified individuals with known disabilities, in accordance with applicable law.

Any applicant requiring an accommodation in connection with the hiring process and/or to perform the essential functions of the position for which the applicant has applied should make a request to the recruiter or hiring manager, or contact Talent Acquisition at [e-mail]