Chief Privacy Officer

Overview

An experienced Chief Privacy Officer is needed to lead global privacy strategy and serve as a trusted advisor to the business in a highly regulated healthcare environment.

This position reports to the General Counsel and is responsible for shaping and advancing a privacy program that supports innovation, safeguards patient data, and enables growth.

Responsibilities

• Lead global privacy strategy, governance, and compliance program
• Serve as the primary advisor on HIPAA and healthcare privacy matters
• Provide guidance on domestic and international privacy laws and regulations, including GDPR and related frameworks
• Partner with business, legal, compliance, IT, product, and security teams to embed privacy into operations and product development
• Oversee privacy by design initiatives across software, digital health, and connected device programs
• Support incident response, breach management, investigations, and remediation efforts
• Advise on privacy considerations for commercial activities, marketing, patient programs, and direct-to-patient business models
• Lead privacy training, policy development, and risk assessments across the organization
• Review and negotiate contracts and third-party arrangements involving sensitive data
• Monitor evolving legal and regulatory developments and translate them into practical business guidance
• Represent the organization in interactions with regulators, industry groups, and external stakeholders as needed

Requirements

• Juris Doctor from an accredited law school
• Active bar membership in good standing in at least one U.S. jurisdiction
• 10+ years of legal experience, with substantial experience in healthcare privacy and 7+ years of managerial experience
• Strong background in a law firm, corporate legal department, or in-house counsel role
• Experience in a regulated healthcare, medical device, life sciences, pharma, or similar environment

Preferred Qualifications

• Experience serving in a public company or highly regulated enterprise environment
• Demonstrated experience leading privacy and legal response to cybersecurity events and incident response involving personal information, protected health information, or other regulated data
• Strong executive presence and ability to influence across all levels of an organization
• Proven ability to build, scale, and improve privacy programs
• Experience with direct-to-consumer or patient-facing business models
• Strong judgment, issue-spotting, and solution-oriented thinking
• Ability to navigate ambiguity, manage competing priorities, and make sound decisions under pressure

Compensation & Benefits

• Salary ranges for U.S. (excl. PR) locations (USD): $191,000.00 - $325,000.00
• For roles located in California, Seattle WA, Washington DC, Boston MA, and New York City, the salary range is $213,000 - $361,000 USD
• Actual compensation may vary based on experience, education, certifications, skills, market conditions, internal equity, and geographic location
• Compensation and benefits information pertains solely to candidates hired within the United States (local market compensation and benefits will apply for others)
• This position is eligible for a short-term incentive called the Short Term Incentive (STI)
• This position is eligible for an annual long-term incentive plan

Benefits (for regular employees working 20 or more hours per week):

• Health, dental, and vision insurance
• Access to a Health Savings Account and Healthcare Flexible Spending Account
• Life insurance
• Long-term disability leave
• Dependent daycare spending account
• Incentive plans
• 401(k) plan with company match
• Short-term disability coverage
• Paid time off and holidays
• Participation in the Employee Stock Purchase Plan
• Access to the Employee Assistance Program
• Eligible employees may also benefit from the Non-qualified Retirement Plan Supplement and Capital Accumulation Plan, subject to IRS minimum earnings requirements

Regular employees are those who are not temporary staff (such as interns), and some benefits may not apply to employees in Puerto Rico.

Location

• Ideally based at Northridge, California headquarters
• Flexibility for a remote arrangement for the right candidate
• Travel may be required

Application Deadline

• The application window for this opening is anticipated to close on 23 Oct 2026

Equal Employment Opportunity

The employer provides equal employment opportunity (EEO) to all persons regardless of protected characteristics under federal, state, or local law, and provides reasonable accommodations for qualified individuals with disabilities.

Los Angeles County Fair Chance / California Fair Chance (If Applicable)

If applying to perform work that will involve performing at least two (2) hours of work on average each week within the unincorporated areas of Los Angeles County, the employer provides a list of material job duties for which it reasonably believes criminal history may have a direct, adverse, and negative relationship potentially resulting in the withdrawal of a conditional offer of employment, and will consider qualified applicants with arrest or conviction records in accordance with the Los Angeles County Fair Chance Ordinance for Employers and the California Fair Chance Act.