Senior Director, Chief Privacy Lead (MedTech)

Location: Pittsburgh, Pennsylvania, or Chelmsford, Massachusetts, United States; corporate, onsite role with up to 20% domestic and international travel.

Annual salary: $220,000–$290,000, plus eligibility for an annual bonus.

Company

hirify.global develops medical devices, software, and related services for diagnosing and treating serious cardiopulmonary and respiratory conditions in more than 140 countries.

What you will do

• Set and execute the global enterprise privacy strategy, policies, and governance framework.
• Lead privacy risk management, including privacy impact assessments, mitigation plans, monitoring, and operational compliance.
• Partner with Legal, Regulatory Affairs, IT, Cybersecurity, R&D, Clinical, Quality, Commercial, Human Resources, and Operations to embed privacy-by-design and privacy-by-default into products, software-enabled medical technologies, connected devices, processes, and systems.
• Advise senior executives on privacy risks, regulatory developments, data ethics, emerging technologies, digital health, and AI-related frameworks.
• Lead and develop the global privacy organization, training program, privacy steward network, and succession planning.
• Oversee privacy contracting, incident response and investigations, regulatory interactions, and relationships with data protection commissioners and government enforcement agencies.

Requirements

• JD from the United States or a European jurisdiction.
• 10+ years of progressive experience in privacy, data protection, cybersecurity, or related risk functions, including experience in private practice or within a complex global healthcare organization such as a hospital system, medical device or MedTech company, or pharmaceutical company.
• Experience advising senior executives on privacy strategy and enterprise risk.
• Expertise interpreting and applying global privacy regulations in a regulated industry, including GDPR, U.S. federal and state privacy laws, HIPAA, and relevant FDCA regulations.
• Ability to build, operationalize, and improve processes and high-performing teams.
• Ability to lead global, cross-functional teams and influence without direct authority.
• Strong strategic thinking, judgment, and decision-making capabilities.
• Fluency in English.

Nice to have

• Advanced degree in Privacy, Information Governance, Cybersecurity, Healthcare Administration, Public Policy, or a related field.
• Degree in Information Systems, Master of Business Administration, or Master of Public Policy.
• Experience supporting or managing data incident management and response, including data subject and regulatory enforcement agency notifications.
• Background partnering with information systems, cybersecurity, and digital technology teams.
• Experience supporting business transformation or operating model changes.
• Certifications such as CIPP, CIPM, or equivalent.
• Additional languages.

Culture & Benefits

• Work in a fast-growing medical technology company focused on improving patient outcomes and supporting underserved patients.
• Culture values innovation, self-motivation, and an entrepreneurial spirit.
• Comprehensive benefits plans are available.
• Employment includes reasonable accommodations in compliance with the Americans with Disabilities Act.