ResMed - Senior Privacy Specialist/Manager - Advanced Privacy Counsel - Privacy Enablement Team (4-10 yrs)

Senior Privacy Specialist/Manager

Job Description:

We are looking for an Advanced Privacy Counsel to join our Privacy Enablement team and support ResMeds mission to create a world where every person can achieve their full potential through better sleep and breathing, with care delivered in their own home. As part of the Privacy Enablement team, you will provide best in class privacy and data protection service to various ResMeds business units and functions across multiple jurisdictions in the APAC region, creating a one-stop solution for the business needs with the support from our professionals in the Privacy Governance and Privacy Technology teams.

Who are we looking for ?

You are an expert in the field of privacy and are driven to deliver outstanding value to your internal stakeholders and teammates alike. You operate with problem-solving mindset and partner with the business to support customer-centric initiatives applying privacy by design principles. You enable business objectives while minimizing privacy risks. You have good stamina and thrive in fast-paced, innovative, diverse work environments. You are agile, curious, process and results-oriented. You also value the "how" in achieving results. You are self-aware, caring, collaborative and strive for excellence.

Let's Talk About Responsibilities :

- Work as part of a cross-functional team delivering best-in-class privacy and data protection service to ResMed's digital health technology organization, product development and commercial business teams to ensure our products, services, platforms and technology delivered by those teams are in compliance with applicable data protection laws and incorporate privacy by design industry best practices.

- Analyze products, policies and initiatives to provide practical legal assessments of risk across multiple jurisdictions in the APAC region.

- Collaborate with the legal team and other data privacy teams to ensure we offer consistent guidance on key areas that cross the organization such as data governance, data retention and deletion, anonymization/pseudonymization of data, cross-border data transfers, data security, privacy by design and machine learning, etc.

- Establish and maintain excellent working relationship with members of the business and stakeholders, and work proactively with them to identify, mitigate, and address privacy risks.

- Draft, review, negotiate and manage data privacy related legal documents, including privacy notice, privacy consent form, data transfer agreement (including SCCs), and legal contracts with business partners, etc.

- Stay on top of the regulatory trends of cutting-edge technologies (e.g. GenAI), understand their potential implications to the digital health solutions of ResMed, create guardrails and navigate the business through the complexity of such new areas to success.

Let's Talk About Qualifications And Experience:

- Minimum years of relevant privacy experience, including at a law firm, consultancy and/or in-house preferably in the digital space, the medical device industry and/or technology sector.

- Bachelor's degree, preferably majoring in law. Good standing in a bar association or equivalent is a plus.

- Strong knowledge and experience of privacy laws and data protection frameworks - Privacy principles and key requirements for India and other major APAC countries (e.g. Australia, South Korea, Japan, and China), with understanding of EU GDPR and US CCPA & HIPAA as a plus.

- Exceptional communication and project management skills, including a strong desire and ability to make complex topics understandable for various audiences.

- Customer service focused with excellent analytical and problem-resolution skills. Solution-oriented with the ability to think strategically and give practical advice by balancing business needs with legal risks.

- Interest in national and international privacy developments, international privacy guidelines and privacy by design.

- One or more certifications from recognized institutions for example, IAPP's Certified Information Privacy Professional (CIPP) certifications or equivalent is preferred.

- Familiar with Privacy automation tools (e.g. OneTrust) is a plus.