Privacy & Compliance Manager
![]() | |
![]() | |
![]() United States, Wisconsin, Middleton | |
![]() | |
Privacy & Compliance Manager
Location: Remote USA Job SummaryAre you passionate about privacy, compliance, and making a real impact in the medical device industry? We're seeking a detail-driven and collaborative Privacy & Compliance Manager to oversee and manage all facets of our organization's privacy compliance efforts. In this pivotal role, you'll ensure that Natus operations and medical devices align with global privacy regulations such as GDPR, HIPAA, NIST2, SOC2, CCPA, and PIPEDA. You'll serve as a strategic partner across the company-working closely with Legal, HR, Quality, Regulatory, Sales, and IT-helping to embed privacy and compliance into the fabric of everything we do. Experience in compliance engineering is a significant plus. This role reports directly to the VP of Quality & Regulatory Affairs. Key Responsibilities * Develop, implement, and maintain privacy policies and procedures in alignment with global regulations (e.g., GDPR, HIPAA). * Conduct privacy risk assessments and internal audits; identify vulnerabilities and recommend mitigation strategies. * Ensure compliance with medical device regulations, including EU MDR and FDA requirements. * Lead the investigation and resolution of privacy incidents; manage reporting and mitigation steps. * Provide expert guidance to internal stakeholders on privacy matters affecting product development, marketing, and customer service. * Design and implement data breach response protocols, including required notifications. * Keep pace with evolving privacy laws and proactively update company policies and procedures. * Deliver employee training on privacy best practices, tools, and legal responsibilities. * Act as the primary contact for all privacy-related inquiries from customers, regulators, and other stakeholders. * Prepare and deliver privacy compliance reports to senior leadership. * Oversee data protection, data governance, and privacy/security policies company-wide. * Collaborate with compliance teams to ensure secure handling and processing of sensitive information in accordance with global laws. * Stay vigilant on emerging external threats and advise relevant stakeholders on risk and mitigation strategies. Qualifications * Bachelor's degree in law, information systems, system analysis, compliance, or a related field with 9+ years of relevant experience - OR - Master's degree with 7+ years, or a Doctoral degree with 4+ years of experience. * Solid understanding of risk management, cybersecurity technologies, and data protection frameworks * Experience with ISO/IEC 27000, NIST 800-53, HIPAA, GDPR, PCI DSS * Prior experience in medical device industry and Quality Management Systems (e.g., 21 CFR 820, ISO 13485) * Proven ability to develop, implement, and drive successful privacy programs in a complex, regulated environment Preferred: * Preferred privacy certifications: CIPP/US, CIPP/E, CIPM, CIPT * Preferred security certifications: CISSP, CISO, CISM, CISATravel Requirement: Minimal (less than 10%) Compensation & Benefits Comprehensive benefits starting on Day 1, including: * Medical, Dental, Vision Insurance * 401K with Company Contribution * 7 Paid Holidays + 2 Floating Holidays * Flexible PTO Policy * Tuition Reimbursement Eligibility (after one year) * Annual Bonus Plan * And more! Natus Pay Transparency DetailsThe pay range for this position is $115K-145K USD annually. Actual base pay will be determined by factors including experience, skills, location, internal equity, and business needs. About UsNatus Neuro is recognized by healthcare providers globally as the source for solutions to screen, diagnose and treat disorders of the brain and neural pathways. Our vision is to deliver innovative and trusted solutions to advance the standard of care and improve patient outcomes and quality of life. Natus products are used in hospitals, clinics and laboratories worldwide. EEO StatementNatus Medical is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, veteran status, disability, sexual orientation, gender identity, or any other protected status. #LI-NR #natus #natuscareers #natusneuro #privacy |