Vice President, US Privacy, Global Data Protection Officer

This is a fully remote position, open to applicants in New York.

📋 Description

• Act as the appointed US Privacy and Global Data Protection Officer.

• Provide strategic direction and vision for the company's extensive privacy and data protection initiatives.

• Lead and guide the privacy legal team, comprising attorneys and a privacy paraprofessional.

• Create legally compliant strategies that focus on healthcare privacy and AI.

• Design and expand a privacy framework for international market growth.

• Counsel executives on privacy considerations related to emerging technologies and AI in clinical environments.

• Manage comprehensive privacy risk assessments and implement Privacy by Design in product development.

• Oversee the response to data incidents and breaches, including managing regulatory relationships and notifications.

• Support Sales and Customer Success during intricate contract negotiations with Fortune 500 companies.

• Define and uphold both external and internal privacy policies.

• Collaborate with the People Team on employee data handling practices.

• Establish risk-based AI governance to enable product development speed while adhering to privacy standards.

• Ensure annual completion of HIPAA and global privacy training across the organization.

• Maintain an updated Trust Center/Knowledge Base to address customer inquiries.

• Implement an automated workflow for Privacy Impact Assessments.

• Document compliance for two new international market entries in the first year.

• Achieve zero findings on privacy controls during SOC 2 Type II and HITRUST audits.

⛳️ Requirements

• Juris Doctorate (JD) from a recognized law school.

• Active membership in at least one state bar.

• Over 12 years of legal experience.

• A minimum of 8 years of specialized experience in data privacy, security, and healthcare law.

• Proven success in leading and expanding privacy teams within a high-growth, global technology context.

• In-depth knowledge of HIPAA/HITECH, GDPR, CCPA/CPRA, and familiarity with international frameworks such as LGPD or PIPEDA.

• Professional privacy certification such as CIPP/US, CIPP/E, CIPM, or CIPT.

• Outstanding communication skills and the ability to convert complex legal requirements into actionable, risk-based business strategies.

• Experience navigating the privacy challenges associated with AI and machine learning in regulated industries.

• Strong commitment to secure and ethical data practices.

• Ability to work remotely, with a preference for candidates located in the NYC area and occasional travel to the NYC headquarters.

🏝️ Benefits

• Health, dental, and vision benefits starting from day one.

• One Medical accounts.

• HSA and FSA plans, with Spring contributing up to $1,000 for HSAs based on the plan type.

• Employer-sponsored 401(k) match of up to 2%.

• Annual allowance of no-cost visits to Spring Health therapists, coaches, and medication management providers for employees and their dependents.

• Paid vacation, sick leave, and recognized company holidays.

• Parental leave after 6 months: 18 weeks for birthing parents and 16 weeks for non-birthing parents.

• Noom weight management program.

• Fertility care assistance through Carrot.

• $4,000 reimbursement for related fertility expenses.

• Wellhub subscription providing fitness, mindfulness, nutrition, and sleep resources.

• BrightHorizons-sponsored childcare, backup care, and elder care services.

• Up to $1,000 annual reimbursement for professional development.

• $200 per year matching for donations.

• Equity opportunities.

• Performance-based bonuses.