Job Description
Your New Company!
At Altasciences we all move in unison to assist and work in the discovery, development, and manufacturing of new drug therapies to get them faster to people who need them.No matter your role, we all play an important part and you will have a significant impact on the health and well-being of people across the globe. By living our values of Employee Development, Customer Focus, Quality and Excellence, Respect and Integrity, we look to foster a passionate and collaborative work environment and we are looking for talented and enthusiastic people, like you, to join our growing team! Whether you’re a recent college graduate or seeking your next career opportunity, it’s time to discover your future at Altasciences. We are better together and together We Are Altasciences.
About The Role
The Privacy & Compliance Manager plays a vital role in keeping the organization’s proprietary and sensitive information secure. They provide strategic guidance and second line of defense oversight to improve company-wide operational processes to establish, measure and improve privacy practices. They work inter-departmentally to create, identify and correct flaws in the company’s privacy program and practices, as well as being key in the company’s security program and certification objectives.
The Privacy & Compliance Manager is responsible for ensuring the company’s sensitive information is protected from unauthorized access. This includes both online and on-premises infrastructures.
The primary functions are to develop and manage the privacy and data protection strategy, and to be responsible for supporting information security governance, specifically related to applicable privacy regulations (including GDPR, CCPR/CCPA, Quebec Law 25, etc.) as well as assisting and guiding Altasciences in ISO 27000/NIST certification and compliance.
What You'll Do Here
- Conduct Privacy audits to determine current state and required actions (gap analysis).
- Develop a sustainable process to ensure effective coverage for the various Technology teams, including representation and participating in key forums (IT Policies, Standards, and Procedures.
- Develop methodology and document processes/process flows to ensure proper identification, capture and syndication of privacy including tracking/reporting on open risks, actions, remediation plans that provide transparency into key risks.
- Perform Privacy Impact Assessments as required.
- Assess and analyze privacy requirements, current state environment and technology platforms to define and propose solutions both administrative and technical to meet our Privacy obligations.
- Improve, and where needed, create our Privacy Program
- Assess our current state against ISO and/or NIST certification requirements.
- Maintain the Privacy Register
- Liaison with external Sponsor and Providers on Privacy matters
- Maintain and update or create any required Privacy Policies and procedures.
- Review and as needed uplift existing policies and procedures regarding data privacy.
- Ensure that local and regional privacy requirements are satisfied while driving towards consistent, rationalized processes.
- Monitor effectiveness of, and implement improvements to, processes for capturing and actioning customer privacy preferences and choices.
- Implementation of common privacy industry standards/regulations.
- Ensure that any new privacy requirements are communicated to business unit management and an appropriate implementation plan is developed and executed.
- Conduct Privacy internal audits.
- Maintain a current knowledge of privacy laws and regulations.
- Work with IT to implement technical solutions (e.g., Data loss Prevention, etc.).
- Work with the business to improve Privacy practices.
- Engage with stakeholders to drive proactive self-identification of privacy risks, and issues.
- Assist IT and the business in its information security compliance goals (i.e.., ISO 27000/NIST).
What You'll Need to Succeed
- Bachelor’s Degree or at least 5 years equivalent work experience in a similar role.
- Certification by IAPP or other recognized certification body.
- Very good knowledge of GDPR (UK GDPR is also fine).
- Knowledge of technical computer solutions and challenges.
- Current knowledge of the main Privacy regulations.
- Experience with the implementation of a privacy program.
- Knowledge of information security and standards (i.e.., ISO, NIST)
- Ability to travel to various sites (approx. 20%) - Office is home based.
- Excellent communication skills, both verbal and written.
- Ability to interact with business partners at all levels of the organization to collect and document integration requirements.
- Excellent customer service and ability to work collaboratively with others.
- Excellent analytical and problem-solving skills.
- Keen eye for detail and organization.
- Ability to work effectively and independently in geographically dispersed cross-functional teams.
- Exhibits excellent time management.
- Demonstrates strong organizational skills and high-level job competencies.
- Eager and enthusiastic to learn and adopt new skills.
- Strong knowledge of Company policies, procedures, industry standards, as well as laws and regulations.
- Strong business acumen.
What We Offer
Altasciences offers a wide variety of benefits to help our employees live healthy and fulfilling lives both at and outside of work.
Altasciences’ Benefits Package Includes:
- Health/Dental/Vision Insurance Plans
- 401(k)/RRSP with Employer Match
- Paid Vacation and Holidays
- Paid Sick and Bereavement Leave
- Employee Assistance & Telehealth Programs
- Telework when applicable
- Training & Development Programs
- Employee Referral Bonus Program
- Annual Performance Reviews
#LI-MB1
MOVING IN UNISON TO DELIVER A BIG IMPACT WITH A PERSONAL TOUCH
MOVING IN UNISON TO DELIVER A BIG IMPACT WITH A PERSONAL TOUCH Altasciences is an equal opportunity employer committed to diversity and inclusion. Our goal is to attract, develop and retain highly talented employees from diverse backgrounds, allowing us to benefit from a wide variety of experiences and perspectives. All qualified applicants will receive consideration for employment without regard to age, race, color, religion, creed, sex, sexual orientation, gender identity, national origin, disability or any other protected grounds under applicable legislation. Reasonable accommodations for persons with disabilities during the recruitment process are available upon request. Join us at Altasciences!
#J-18808-Ljbffr