updates the Privacy Officer and other team members on new matters, challenges, and status.   

#LI-HYBRID

Responsibilities:

• Tracking and conducting legal research and analysis of privacy requirements arising under privacy legislation, regulation, and published standards and controls

• Supporting the company’s compliance with federal and state privacy legislation and regulation, company privacy policies and procedures, and published privacy standards and controls

• Supporting the development and maintenance of privacy policies and related implementation guidance that guide workforce behaviors

• Maintaining electronic records and other privacy program documentation to demonstrate program operations

• Supporting privacy education initiatives, such as training obligations, awareness activities and specialized privacy outreach

• Assisting in the development and maintenance of privacy content for the company’s privacy intranet

• Managing the Privacy Office’s processing of requests relating to individual participation, such as access, amendment, deletion, restriction, and the like, including interfacing with leaders in Marketing, Human Resources, and Product Innovation

• Providing privacy support for security incident response, triaging privacy incident investigation and supporting the Privacy Office in related breach response

• Developing and supporting the completion of privacy risk assessments, including tracking risks in risk register

• Developing Privacy Program metrics and preparing period reports

• Supporting Litigation function as it relates to processing subpoenas, mentoring administrative staff, and escalating to Privacy Counsel as necessary and appropriate.

• Completing various administrative tasks associated with the operation of the Privacy Office, such as scheduling meetings and conference calls, preparing relevant materials including meeting agendas and minutes, preparing PowerPoint presentations, supporting development of awareness media and education collateral, and helping with faxes, copies, mail, and other general administrative duties as necessary

• Handling special projects and other duties as assigned

Qualifications:

Basic Requirements:

• A Bachelor’s degree or equivalent experience

• 5+ years of experience in related progressive roles demonstrating management of multiple initiatives

• 5 years of experience with privacy (including privacy program operations) and cybersecurity

• 3+ years of experience with privacy risk assessment and analysis

• 3+ years of experience working with product owners and developers

• 3+ years of experience with U.S. health privacy laws (such as HIPAA) and related compliance requirements

• Familiarity with Privacy by Design principles

• Familiarity with state privacy laws, or willingness to develop knowledge

• Strong research and writing skills including both formal memoranda and informal summaries

• Significant experience handling privacy inquiries and comfort with responding to external requests and individuals, including maintaining program documentation concerning the same

• Prior experienced developing privacy policies, standards, and related education (training and awareness) content and collateral

• A highly organized, agile, and detail-oriented management style with pragmatic judgement, managing multiple tasks, meeting conflicting deadlines, and engaging with leadership regarding issues and conflicts.

• Confidence when dealing with people at all levels of seniority

• Proven ability to contribute as part of a cross-functional team to implement privacy strategy and consistently demonstrate compliance with privacy policies

Preferred Requirements:

• Professional certifications, such as paralegal certification from an ABA-approved paralegal certification program and/or a privacy certification from an internationally recognized organization (International Association of Privacy Professionals or ISACA)

• Experience with OneTrust privacy assessment and OnSpring GRC tools

• Familiarity with Agile development, enterprise architecture, portfolio management, and security

Surescripts embraces flexibility through its Flexible Hybrid Work model for most positions. This model allows employees to work virtually while still utilizing our offices as collaboration centers. With alignment and agreement from your leadership, you can come and go from the office as needed .

What You’re Like 

You have never met a problem you did not want to try to solve. You are creative and practical. With your ability to drive to results, cut through the fog, and help others see multiple perspectives, you save the day on a semi-regular basis.   

What We’re Like

We learn from each other and help one another. We don’t waste energy competing with one another, stirring up drama, or plotting revenge. We’re too busy for that. Plus, we actually like each other. We get work done, ask how we can get better, and generally enjoy ourselves along the way.  

What the Work is Like

We operate a balancing act: We don’t just advise on risks; we help the business move toward opportunities. . It’s good that we are flexible and nimble as we operate in an ever-evolving landscape. We encounter and embrace constant change and continue to drive compliance with laws, regulatory requirements, policies and procedures. We are proud that our work protects and advances the interests of the Surescripts Network Alliance and helps build a secure, connected, and effective healthcare system.

Why Wait? Apply Now

We’re a midsize company. This means you’re not just another employee ID number. Here, you can build real relationships and feel supported by truly awesome people with diverse backgrounds and talents in an innovative and collaborative work culture. We strive to create an environment where you can be yourself, share your ideas and work your way. We offer opportunities for employee development, as well as competitive compensation packages and extensive benefits.

At Surescripts, base pay is one part of our Total Rewards Package (which may also include bonus, benefits etc.) and is determined within a range. The base pay range for this position is $111,900 - $136,700 per year. Your base pay may vary within or outside of this range depending on a number of factors, including (but not limited to) your qualifications, skills, experience, and location.

Benefits include, but are not limited to, comprehensive healthcare (including infertility coverage), generous paid time off including paid childbirth and parental leave and mental health days, pet insurance, and 401(k) with company match and immediate vesting. To learn more, review the Keep You and Yours Healthy, Balancing Work and Life, and Where Talent Takes Shape links under the Better Benefits. Better Work. Better Life section of our careers site.

Physical and Mental Requirements

While performing duties of this job, an employee may be required to perform any, or all of the following: attend meetings in and out of the office, travel, communicate effectively (both orally and in writing), and be able to effectively use computers and other electronic and standard office equipment with, or without, a reasonable accommodation. Additionally, this job requires certain mental demands, including the ability to use judgement, withstand moderate amounts of stress and maintain attention to detail with, or without, a reasonable accommodation.

Surescripts is proud to be an Equal Employment Opportunity and Affirmative Action employer. We do not discriminate on the basis of race, color, religion, age, national origin, ancestry, disability, medical condition, marital status, pregnancy, genetic information, gender, sexual orientation, parental status, gender identity, gender expression, veteran status, or any other status protected under federal, state, or local law.