Privacy Specialist

Posted 17 days ago

spectraforce technologiesSan Diego (CA)

SENIORITY

Senior

Apply

About the role

Job Title: Privacy Specialist
Location: San Diego, CA (100% Onsite)
Position Type: 08+ Months with potential extension
Reporting To: Senior Director, Compliance & Privacy
Position Summary: We are seeking a detail-oriented Privacy Specialist to support our growing global privacy program. This role focuses on hands-on privacy operations, compliance documentation, data mapping, and assessment execution within a highly regulated pharmaceutical and life sciences environment. Reporting directly to the Senior Director of Compliance & Privacy, you will partner closely with Privacy Counsel and cross-functional business units to ensure privacy-by-design principles and operational requirements are embedded across clinical, patient, and corporate operations.
Key Responsibilities: Assessments & Reviews: Partner directly with Privacy Counsel to conduct and track Data Protection Impact Assessments (DPIAs), Privacy Impact Assessments (PIAs), and vendor assessments across clinical trials, patient services, pharmacovigilance, medical affairs, and corporate operations. Data Mapping & RoPAs: Collaborate across departments to build, maintain, and update Records of Processing Activities (RoPAs), data inventories, and enterprise data flow maps. Intake & Operational Support: Manage the daily privacy intake queue, addressing routine compliance questions, logging requests, tracking remediation action items, and escalating complex legal matters appropriately. Regulatory Compliance: Support ongoing alignment with global and regional privacy frameworks, including GDPR, CCPA/CPRA, emerging U.S. state privacy laws, and applicable health data regulations. Documentation & Governance: Help draft and update privacy policies, internal procedures, notices, standard operating procedures (SOPs), and training materials. Audit & Monitoring: Collect audit evidence, assist with compliance tracking, monitor key regulatory developments, and prepare summaries for internal stakeholders. Qualifications & Experience
Experience: Approximately 5 years of relevant professional experience in privacy operations, data protection, legal compliance, or corporate paralegal roles.
Background/Certification: Paralegal background or formal paralegal training/certificate. CIPP (e.g., CIPP/US, CIPP/E, CIPM) certification is a plus. Industry Background: Prior experience in pharmaceuticals, biotechnology, healthcare, clinical research, or a similarly regulated environment is strongly preferred.
Education: Bachelor's degree preferred; Associate degree or High School Diploma accepted with significant relevant experience.
Technical Skills: Proficiency with Microsoft Office Suite (advanced Excel, Word, PowerPoint) and experience using privacy management/data mapping platforms (e.g., OneTrust or similar tools).
Core Competencies: Process-Driven: Exceptional attention to detail, structured note-taking, and rigorous documentation habits. Collaboration: Strong interpersonal skills with demonstrated ability to interface effectively with legal counsel, clinical teams, IT, and external vendors. Discretion: Highest level of professional integrity, discretion, and ability to handle sensitive clinical, personal, and proprietary data. Adaptability: Demonstrated initiative and comfort navigating shifting priorities within an evolving regulatory landscape.
Applicant Notices & Disclaimers: For information on benefits, equal opportunity employment, and location-specific applicant notices, click here

Before you apply

Applying takes about a minute. These four things decide how fast it moves after that.

Your profile is current

It's what we read first. Occupations, seniority and locations matter more than a long history.

Two examples you can talk through

Not a portfolio — just two pieces of work where you can explain the decisions and what you'd change.

A number in mind

What you're on now and what would make you move. We negotiate better when we know both.

Your notice period

Employers plan around it, and it's the question that stalls offers most often.

Once you apply, someone reads it and calls you before anything reaches the employer — usually within two working days.

More like this