Data Privacy Director

This is a fully remote position, open to applicants in United States.

📋 Description

• Develop and implement Natera’s enterprise privacy program across commercial, clinical, and product domains.

• Oversee privacy impact assessments, regulatory analyses, and provide risk-based recommendations.

• Perform privacy reviews of contracts and legal engagements, drafting recommendations for counsel evaluation.

• Create effective, repeatable processes and tools that enhance program capacity.

• Offer guidance and mentorship to both privacy team members and external resources.

• Integrate privacy-by-design principles into product and software development lifecycles.

• Convert privacy requirements into actionable controls, patterns, and reusable technical solutions.

• Support privacy engineering initiatives that implement compliance without hindering delivery.

• Establish risk-based frameworks for data access, sharing, secondary usage, and the use of commercial or partnership data.

• Standardize the evaluation, approval, and documentation processes for data-use decisions.

• Implement operational guardrails for sensitive and regulated data, AI/ML training datasets, and advanced analytics.

• Manage data flows across marketing and advertising technologies, commercial partnerships, and third-party data sharing.

• Provide guidance to Medical Affairs and Clinical Operations on privacy requirements related to clinical research protocols, clinical trials, real-world evidence studies, and the secondary use of clinical data.

• Ensure data flows and consent frameworks comply with HIPAA, IRB requirements, GCP guidelines, and internal governance standards.

• Facilitate responsible data usage while reducing regulatory and reputational risks.

⛳️ Requirements

• Bachelor’s Degree in a relevant field (e.g., law/legal studies, information systems, business administration, data analytics).

• IAPP certification is highly preferred (e.g., CIPP, CIPT, AGCP).

• 8-10 years of experience in privacy, data governance, compliance, or related fields, with progressive leadership roles.

• Extensive knowledge of global privacy regulations, including HIPAA, GDPR, and CCPA/CPRA.

• Experience in integrating privacy into product and software development lifecycles, focusing on privacy-by-design and privacy engineering.

• Experience supporting clinical research or clinical trials from a privacy standpoint.

• Understanding of IRB processes, informed consent frameworks, and Good Clinical Practice (GCP) as they pertain to data privacy.

• General background in healthcare compliance, including issues related to fraud, waste & abuse, Stark Law, Anti-Kickback Statute, and the Sunshine Act.

• Experience operating across commercial, clinical, and product/technology sectors.

• Familiarity with governance concepts related to AI/ML and advanced analytics, particularly concerning data use and ethics.

• Proven capacity to convert complex regulatory requirements into practical, scalable processes.

• Strong skills in influencing and aligning senior stakeholders across various functions.

• Experience in leading, mentoring, or managing privacy professionals or cross-functional teams.

• Proficiency with program management and collaboration tools such as JIRA and Google Workspace.

🏝️ Benefits

• Comprehensive medical, dental, vision, life, and disability plans for eligible employees and their dependents.

• Complimentary testing for employees and their immediate family members.

• Fertility care benefits available.

• Leave for pregnancy and bonding with a newborn.

• 401(k) benefits offered.

• Commuter benefits provided.

• Employee referral program available.