Global Privacy Counsel: Data Protection & Compliance

Nova Biomedical; Waltham (MA); On-site; USD 180,000 - 240,000; Full time

Job summary

Nova Biomedical is seeking a Privacy Counsel to provide legal oversight, risk assessment, and strategic guidance on privacy, data‑protection, and data‑management matters across Nova Biomedical Corporation and its subsidiaries.

The Privacy Counsel will help ensure compliance with applicable global privacy laws and regulations by developing and implementing privacy policies and procedures, reviewing contracts from a privacy perspective, conducting training, and advising business and technology

Responsibilities

• Provide legal oversight and strategic guidance for Nova Biomedical’s privacy, data-management, and information-security programs in accordance with applicable U.S. and global privacy laws.
• Advise business, technology, and legal stakeholders on privacy, data protection, security, and compliance matters.
• Interpret and apply privacy requirements under the General Data Protection Regulation and applicable U.S. federal and state laws.
• Implement, maintain, and enforce internal and external privacy policies, procedures, data-protection agreements, and related legal documentation.
• Ensure privacy policies and procedures reflect evolving legal requirements and relevant industry practices.
• Draft, review, negotiate, and manage privacy-related legal documents, including Records of Processing Activities, Data Protection Impact Assessments, Privacy Impact Assessments, Privacy notices, Data Processing Agreements, Data-transfer agreements, Business Associate Agreements, Inter-Affiliate Data Transfer Agreements.
• Analyze products, services, technologies, projects, and business initiatives for privacy and data-protection risks.
• Conduct privacy impact assessments and recommend appropriate measures to mitigate identified risks.
• Develop, deliver, and lead privacy and data-protection training programs.
• Establish role-based privacy training, new-hire training, annual refreshers, and appropriate completion records.
• Support enterprise risk-management activities by identifying, assessing, documenting, and escalating material privacy and data-protection risks.
• Contribute to risk assessments, risk registers, executive reporting, and related governance activities.
• Serve as a liaison among IT, InfoSec, Legal, Governance, Risk and Compliance, and relevant business functions on privacy and information-security matters.
• Monitor changes in privacy, data-protection, and information-security laws and regulations.
• Evaluate and communicate the potential impact of legal and regulatory developments on Nova Biomedical.
• Collaborate with global team members, particularly stakeholders in the EU, to promote consistent privacy practices and risk-mitigation strategies.
• Research complex privacy and data-protection matters and provide practical legal advice and recommendations.
• Serve as the primary legal point of contact for personal data breaches.
• Lead the legal aspects of Nova Biomedical’s Personal Data Breach process in coordination with IT, InfoSec, and other stakeholders.
• Establish breach-determination criteria, jurisdiction-specific notification requirements, escalation paths, defined responsibilities, and a centralized breach register.
• Serve as the primary interface with the Data Protection Officer.
• Support interactions with regulators and outside counsel when required.
• Provide privacy-related legal support for strategic transactions and other mission-critical initiatives.
• Support privacy due diligence and integration activities associated with mergers, acquisitions, and other strategic transactions.
• Provide legal guidance regarding commercial agreements, compliance programs, healthcare-industry requirements as needed.

Job description

Nova Biomedical is seeking a Privacy Counsel to provide legal oversight, risk assessment, and strategic guidance on privacy, data‑protection, and data‑management matters across Nova Biomedical Corporation and its subsidiaries.

The Privacy Counsel will help ensure compliance with applicable global privacy laws and regulations by developing and implementing privacy policies and procedures, reviewing contracts from a privacy perspective, conducting training, and advising business and technology