Senior Analyst, Global Privacy Compliance

This is a fully remote position, open to applicants in Florida, +5 more states.

📋 Description

• Assist in the receipt, management, and suitable responses to privacy inquiries from government and regulatory bodies, customers, patients, employees, and other stakeholders.

• Aid in the execution of requirements with global and regional authorities and regulators, including necessary filings, registrations, and appointments.

• Conduct and evaluate Data Privacy Impact Assessments, ensuring compliance with global privacy DPIA directives and risk assessment standards.

• Support the review, assessment, and response to individual rights requests, including tracking metrics and KPIs for reporting purposes.

• Contribute to ongoing auditing and monitoring efforts alongside Internal Audit, Compliance, IT Security, and Legal teams.

• Suggest improvements to privacy programs and strategies driven by business requirements, industry trends, and best practices.

• Recognize and escalate issues to management and/or legal review promptly.

• Maintain an understanding of Stryker’s product offerings, competitive landscape, and customer base to assist in functional initiatives and recommendations.

• Oversee and document privacy requests and assessments while providing proactive updates.

• Identify opportunities for system or process enhancements that boost efficiency, compliance, or reduce business expenses.

⛳️ Requirements

• Bachelor's degree.

• At least 2 years of practical experience in executing or managing enterprise data privacy, data protection, or privacy management programs.

• Proven experience in conducting and documenting Privacy Impact Assessments (PIAs) and Data Protection Impact Assessments (DPIAs), which includes evaluating data processing activities, identifying privacy risks, and suggesting mitigation measures.

• Hands-on experience managing Data Subject Access Requests (DSARs) and Data Subject Rights (DSR) requests, involving request intake, evaluation, tracking, response coordination, and adherence to regulatory timelines.

• Practical experience in applying privacy risk assessment methodologies or frameworks to identify, document, and mitigate data privacy risks within an enterprise privacy program.

• Proficient in using OneTrust to facilitate privacy management tasks, such as privacy assessments, data subject rights requests, risk assessments, or privacy program workflows.

• Experience working collaboratively with Legal, Compliance, Information Security, and business stakeholders to implement enterprise privacy mandates and support privacy governance initiatives.

• Preferred: 5 or more years of professional experience in enterprise privacy management, data protection, or global privacy operations programs.

• Preferred: Advanced proficiency with OneTrust, covering PIA/DPIA assessments, DSAR workflows, privacy risk management, and reporting.

• Preferred: Experience in supporting global privacy programs within multinational organizations, including cross-border data protection obligations.

• Preferred: Familiarity with global privacy regulations, such as GDPR, CCPA, CPRA, and other relevant data protection laws.

• Preferred: Experience in applying enterprise privacy risk management methodologies.

• Preferred: Professional privacy certifications, including CIPP/US, CIPP/E, CIPM, or CIPT.

• Preferred: Experience in developing privacy program metrics, dashboards, process improvements, or workflow automation.

• Preferred: Experience working within a large, global, matrixed organization.

• Preferred: Background in the medical device, healthcare technology, or another highly regulated industry.

🏝️ Benefits

• Flexibility for remote work.

• Commitment to equal opportunity employment.

• Travel requirement: 10%.