Privacy Operations Specialist — 6-Month Contract

Merck & Co.; San Diego (CA); On-site; USD 41,000 - 55,000; Full time

Job summary

Merck & Co. in San Diego, CA, seeks a Privacy Specialist (Paralegal preferred) for a 6-month contract to support privacy operations, DPIAs, RoPAs, and documentation. This in-person role reports to the Sr. Dir. Compliance & Privacy.

The role requires collaboration with cross-functional teams to maintain data inventories and mappings, assist with intake and requests, and ensure compliance with GDPR, CCPA/CPRA, and other health data laws.

Qualifications

• Ability to follow a process carefully and document work clearly.
• Strong communication and teamwork skills.
• Professionalism handling confidential information.
• Prior internship or project-based work preferred.
• Interest in the pharmaceutical/biotechnology industry strongly preferred.
• Strong analytical and problem-solving skills.

Responsibilities

• Support daily privacy program activities, including assessments and documentation.
• Assist Privacy Counsel with DPIAs, PIAs, and other privacy assessments.
• Work cross-functionally to maintain RoPAs, data inventories, and data mappings.
• Assist with intake, tracking, and documentation of privacy questions.
• Support compliance with GDPR, CCPA/CPRA, and other privacy laws.
• Monitor privacy regulatory updates and summarize key developments.
• Maintain privacy policies, procedures, notices, templates, and training materials.
• Assist with privacy reviews for processing activities.
• Collect evidence and track follow-up items for assessments.

Skills

Attention to detail

Communication

Teamwork

Professionalism

Education

Bachelor's degree in CS/IS/IT/CE

Tools

Microsoft Office

Job description

Merck & Co. in San Diego, CA, seeks a Privacy Specialist (Paralegal preferred) for a 6-month contract to support privacy operations, DPIAs, RoPAs, and documentation. This in-person role reports to the Sr. Dir. Compliance & Privacy.

The role requires collaboration with cross-functional teams to maintain data inventories and mappings, assist with intake and requests, and ensure compliance with GDPR, CCPA/CPRA, and other health data laws.