Senior Director, Chief Privacy Lead

Location: Chelmsford, MA, United States; travel up to 20% domestically and internationally.

Annual salary: $220,000–$290,000, plus eligibility for an annual bonus.

Company

Medical technology company developing medical devices, software, and related services for cardiopulmonary and respiratory care in more than 140 countries.

What you will do

• Set and execute the enterprise-wide global privacy strategy, policies, and governance framework.
• Lead privacy risk management, privacy impact assessments, mitigation plans, monitoring, and operational compliance.
• Embed privacy-by-design and privacy-by-default principles into products, software-enabled medical technologies, connected devices, systems, and business processes.
• Advise senior executives on privacy risks, regulatory developments, data ethics, emerging technologies, and enterprise risk.
• Lead and develop the global privacy organization, including talent development and succession planning.
• Oversee privacy contracting, training, incident response, investigations, regulatory interactions, and relationships with data protection authorities.

Requirements

• JD from the United States or a European jurisdiction.
• 10+ years of progressive experience in privacy, data protection, cybersecurity, or related risk functions.
• Experience in private practice or within a complex global healthcare organization, such as a hospital system, medical device or MedTech company, or pharmaceutical industry.
• Experience advising senior executives on privacy strategy and enterprise risk.
• Expertise interpreting and applying global privacy regulations in a regulated industry, including GDPR, U.S. federal and state privacy laws, HIPAA, and relevant FDCA regulations.
• Ability to build, operationalize, and improve processes and high-performing teams.
• Ability to lead global cross-functional teams and influence without direct authority.
• Strong strategic thinking, judgment, and decision-making capabilities.
• Fluency in English.

Nice to have

• Advanced degree in Privacy, Information Governance, Cybersecurity, Healthcare Administration, Public Policy, or a related field.
• Degree in Information Systems, Master of Business Administration, or Master of Public Policy.
• Experience supporting or managing data incident management and response, including data subject and regulatory enforcement agency notifications.
• Background partnering with information systems, cybersecurity, and digital technology teams.
• Experience supporting business transformation or operating model changes.
• Certifications such as CIPP, CIPM, or equivalent.
• Additional language proficiency.

Culture & Benefits

• Work in a regulated global healthcare and MedTech environment focused on improving patient outcomes.
• Culture values innovation, self-motivation, and an entrepreneurial spirit.
• Comprehensive benefits plans are available.
• Annual bonus eligibility is provided in accordance with the company bonus plan.