Privacy and RAI Engineer
Dassault Systèmes
A complete application in a minute — tailored resume and cover letter, ready to send.
Benefits offered by this job
Job summary
Medidata is hiring a Privacy & AI Engineer in New York City to translate legal/regulatory requirements into product-level privacy controls across the SDLC. You will lead PIAs and DPIAs, collaborate on data flows with R&D and information security, and help mature our AI governance program with cross-functional partners.
You will document risk assessments, track regulatory developments, and support privacy operations and vendor reviews within a hybrid NYC-based role.
Qualifications
- 6+ years of experience in privacy engineering, data governance, or a related technical compliance role.
- Understanding of GDPR, HIPAA, UK GDPR, LGPD and US state privacy laws.
- Working familiarity with AI governance frameworks (NIST RMF, ISO 42001, EU AI Act).
- Hands-on privacy engineering techniques (data minimization, de-identification, access design, audit logs).
- Ability to translate legal requirements into technical specs and product controls.
- IAPP certifications (CIPT, CIPP/E/CIPP/US/CIPM) considered a plus.
Responsibilities
- Design and implement privacy controls across the SDLC with R&D, data science and security teams.
- Lead PIAs/DPAs for new or modified products, focusing on personal data processing and AI components.
- Collaborate to assess data flows involving clinical data and sponsor datasets for compliance.
- Document AI system risks and governance mappings for Medidata AI products.
- Track regulatory obligations and prepare governance documentation and disclosures.
- Support DPIA/PIA processes and cross-functional reviews.
Skills
Education
Tools
Job description
This is a hybrid remote/in-office role based in NYC
Medidata follows a hybrid office policy in which employees who are hired for an in-person position are expected to work on site a certain number of days per week following Company policy.
Medidata is powering smarter treatments and healthier people through digital solutions to support clinical trials. Celebrating over 25 years of ground-breaking technological innovation across more than 38,000 trials and 12 million patients, Medidata offers industry-leading expertise, analytics-powered insights, and one of the largest clinical trial data sets in the industry. More than 1 million registered users across approximately 2,300 customers trust Medidata's seamless, end-to-end platform to improve patient experiences, accelerate clinical breakthroughs, and bring therapies to market faster. A Dassault Systèmes brand (Euronext Paris: FR0014003TT8, DSY.PA), Medidata is headquartered in New York City and has been recognized as a Leader by Everest Group and IDC. Discover more at www.medidata.com . Listen to our latest podcast, from Dreamers to Disruptors , and follow us at @Medidata.
This is an opportunity to be part of the Privacy & AI team tackling some of the most complex questions at the intersection of privacy & AI law, technology and life sciences as part of our tight-knit, dynamic legal department at our U.S. headquarters in New York City. We're seeking a Privacy & AI Engineer to further mature our Privacy & AI Program. This role reports directly to Medidata's VP, Associate General Counsel, Privacy & AI, working closely with our highly collaborative, cross-functional partners. As a member of the broader legal team, you will play a pivotal role in (i) translating legal and regulatory requirements into product-embedded technical controls that our cross-functional partners can act upon, (ii) maturing our privacy and responsible AI programs in collaboration with our cross-functional partners, and (iii) further developing operational efficiencies of the broader legal and regulatory teams leveraging existing third-party tools, including generative AI service providers.
Support the design and implementation of technical privacy controls across Medidata's software development lifecycle (SDLC) in collaboration with partners in R&D, engineering, data science and information security.
Lead Privacy Impact Assessments (PIAs) and Data Protection Impact Assessments (DPIAs) for new and materially modified products, with particular attention to personal data processing and AI/ML components.
Collaborate with partners in information security to evaluate and advise on the architecture of data flows involving clinical trial subject data, real-world data inputs, and sponsor datasets for compliance with applicable data protection frameworks.
Partner with the AI product and data science teams to document AI system risk assessments and algorithmic impact analyses for Medidata AI products, including classification of systems under the EU AI Act risk tiers, NIST AI RMF governance mapping, and ISO 42001 standard.
Support Medidata's obligations under laws like the EU AI Act — including documentation, human oversight design, incident reporting readiness, and Fundamental Rights Impact Assessment (FRIA) scoping for high-risk AI use cases in clinical contexts.
Track applicable regulatory obligations, and the status of ongoing compliance activities across product lines.
Collaborate with cross-functional partners to generate model cards, and AI system disclosures to support both internal governance and client-facing transparency commitments, including enterprise AI data sheet responses.
Support the Privacy Program Manager in evolving technical components of Medidata's privacy program infrastructure, including data mapping tooling, consent management platforms, and privacy management software (e.g., TrustArc or equivalent).
Collaborate with our privacy counsels to track regulatory developments and prepare technical briefings for the VP, Associate General Counsel, Privacy & AI and Chief Legal Officer on emerging privacy engineering and AI governance obligations relevant to Medidata's business.
Support the Privacy & AI team in responding to Data Subject Access Requests (DSARs) and data rights exercises involving clinical trial participants — including technical scoping, data mapping, and workflow automation.
Serve as a technical privacy and AI subject matter expert in client security and privacy assessments, vendor due diligence reviews, and responses to enterprise RFPs and information security questionnaires.
Support the broader legal team with initiatives relating to further adoption of AI in daily operations.
6+ years of experience in privacy engineering, data governance, or a related technical compliance role — preferably within a healthcare, life sciences, or enterprise SaaS organization.
Demonstrated understanding of data protection frameworks relevant to clinical research and/or healthcare contexts, including GDPR, HIPAA, UK GDPR, LGPD and US State Consumer Health Privacy Laws.
Working familiarity with AI governance frameworks, including NIST AI RMF 1.0, ISO 42001, and EU AI Act deployer, producer and provider obligations.
Hands-on experience with privacy engineering techniques such as data minimization, de-identification, pseudonymization, access control design, and audit logging.
Ability to translate complex legal and regulatory requirements into actionable technical specifications and product controls.
Experience contributing to or leading DPIAs/PIAs and cross-functional data protection reviews.
Strong oral and written communication skills with ability to produce clear policy documents, technical briefs, and executive-ready summaries for different audience types such as legal and/or R&D leadership personas.
Experience with privacy management platforms (e.g., OneTrust, Osano, Securiti) or data catalog/lineage tools.
Experience with implementing generative AI service provider tools like Claude, Gemini or ChatGPT.
Familiarity with open agentic AI standards including MCP, A2A, and emerging agent orchestration frameworks with particular attention to their data access, permissioning, and audit implications.
IAPP Certification(s): CIPT (Certified Information Privacy Technologist)
IAPP certification(s): AIGP, CIPP/E, CIPP/US, or CIPM.
Experience with clinical trial software (EDC, CTMS, eClinical platforms), RWD, and regulated healthcare IT environments.
Familiarity with HITRUST, HDS 2.0, NHS DSPT, FedRAMP, or similar security certification frameworks with privacy control intersections.
Prior experience with AI product governance, including model risk management, algorithmic bias assessment, or fairness/explainability tooling.
Proficiency in Python or equivalent scripting language for privacy automation, data analysis, or tooling development.
Bachelor's degree required, preferably in Computer Science, Information Systems, Data Science, or a related technical field.
Advanced degree in law, information privacy, or a relevant technical discipline is a plus. Equivalent professional experience and certification will be considered.
As with all roles, Medidata sets ranges based on a number of factors including function, level, candidate expertise and experience, and geographic location.
The salary range for positions that will be physically based in the NYC Metro Area is $114,750-153,000.
Base pay is one part of the Total Rewards that Medidata provides to compensate and recognize employees for their work. Most sales positions are eligible for a commission on the terms of applicable plan documents, and many of Medidata's non-sales positions are eligible for annual bonuses. Medidata believes that benefits should connect you to the support you need when it matters most and provides benefits, including medical, dental, life and disability insurance, 401(k) matching, family leave, flexible paid time off; and 10 paid holidays per year.
In order to provide equal employment and advancement opportunities to all individuals, employment decisions at Medidata are based on merit, qualifications and abilities. Medidata is committed to a policy of non-discrimination and equal opportunity for all employees and qualified applicants without regard to race, color, religion, gender, sex (including pregnancy, childbirth or medical or common conditions related to pregnancy or childbirth), sexual orientation, gender identity, gender expression, marital status, familial status, national origin, ancestry, age, disability, veteran status, military service, application for military service, genetic information, receipt of free medical care, or any other characteristic protected under applicable law. Medidata will make reasonable accommodations for qualified individuals with known disabilities, in accordance with applicable law.
We will accept applications on an ongoing basis until we fill the position.
In order to provide equal employment and advancement opportunities to all individuals, employment decisions at 3DS are based on merit, qualifications and abilities. 3DS is committed to a policy of non-discrimination and equal opportunity for all employees and qualified applicants without regard to race, color, religion, gender, sex (including pregnancy, childbirth or medical or common conditions related to pregnancy or childbirth), sexual orientation, gender identity, gender expression, marital status, familial status, national origin, ancestry, age (40 and above), disability, veteran status, military service, application for military service, genetic information, receipt of free medical care, or any other characteristic protected under applicable law. 3DS will make reasonable accommodations for qualified individuals with known disabilities, in accordance with applicable law.Qualified applicants with arrest or conviction records will be considered for employment in accordance with applicable state laws and local ordinances. We are committed to fair employment practices and will evaluate all candidates based on their qualifications, regardless of past arrest or conviction history.
Compensation for the role will be commensurate with experience. The total expected compensation range will be between $114750 and $153000, representing the base salary (or annualized salary based on estimated hourly compensation) and target bonus.
MEDIDATA generates the evidence and insights to help pharmaceutical, biotech, medical device and diagnostics companies, and academic researchers accelerate value, minimize risk, and optimize outcomes.
Visit the other sections of our website to find out more.
Get to know about your recruitment journey.
Be part of the future of our workforce – check out internship and job opportunities.
'/%3e%3cpath%20d='M101.744%2012.4726L102.894%2016.1947L99.0021%2013.2201L101.744%2012.4726ZM105.3%208.40937H100.488L99.0026%203.59473L97.5116%208.41047L92.7%208.40385L96.5965%2011.3834L95.1055%2016.1942L99.0021%2013.2196L101.408%2011.3834L105.3%208.40992V8.40937Z'%20fill='white'/%3e%3cdefs%3e%3clinearGradient%20id='paint0_linear_5593_1381'%20x1='90'%20y1='9.44471'%20x2='99'%20y2='9.44471'%20gradientUnits='userSpaceOnUse'%3e%3cstop%20stop-color='%2300AD70'/%3e%3cstop%20offset='0.998594'%20stop-color='%2300B67A'/%3e%3cstop%20offset='1'%20stop-color='%23DCDCE6'/%3e%3c/linearGradient%3e%3c/defs%3e%3c/svg%3e){kind=small}
