Privacy Manager

Job Summary:

The Privacy Manager will support the Privacy Office, Compliance, and risk management functions in building, monitoring, and managing employee and vendor due diligence. Responsibilities will include assessment of policies, procedures, and operations to ensure the organization meets privacy and compliance requirements for the protection of critical information. Duties under the direction of the Privacy department leadership also include analyzing and implementing strategies for improvement. Responsibilities may include delivering training and communicating educational materials that provide guidance on managing privacy protection and mitigating risks related to the unauthorized access of sensitive information.  In addition, manager will need to monitor for privacy and healthcare compliance concerns. The Privacy Manager will be responsible for operationalizing key policies and procedures to support and enable the growing SpringWorks organization.

Key Responsibilities:  

• Assist in creating and maintaining privacy related notices, policies, standards, guidelines and processes. 

• Conduct assessments, review results and work with stakeholders to mitigate privacy risks across the organization. 

• Provide privacy guidance, analysis, and feedback to the business partners. 

• Collaborate with compliance and security professionals on projects related to compliance with global data protection and privacy laws. 

• Assist in developing and administering privacy training and awareness campaigns for various groups within the company. 

• Establish and manage tools that track compliance with global privacy obligations such as privacy impact assessments, technical implementation of privacy by design and default, and operational workflows.
  
  
• Coordinate internal and external audits of our privacy and healthcare compliance systems and procedures.
  
  
• Provide ongoing management, content development and oversight of the privacy program, including training, risk management, exception handling and process improvement. 

• Perform other duties and responsibilities as assigned. 

Qualifications:

• Education: Bachelor’s Degree. Certification in privacy or healthcare compliance preferred: IAPP privacy certification (CIPP/US, CIPM, etc.)

• Minimum 3 years’ experience in health care compliance/privacy sector.  

• Experience in an Audit, (Privacy, Compliance, Financial) in the pharmaceutical industry is preferred.  

• Knowledge of healthcare privacy laws and obligations – US State and Federal Laws, HIPAA, GDPR, etc.  

• Knowledge of healthcare laws and regulations, including the False Claims Act, Anti-Kickback Statute, Sunshine Act, FCPA/UKBA, and privacy laws and regulations. 
  
  
• Knowledge of privacy concepts and practices (strategies, internal controls, information analysis, reporting, including trending and communication).
  
  
• Embody the SpringWorks Values to act with empathy and humility to drive a culture that takes ownership and accountability for their individual and teams’ performance. 
  
  
• Strong interpersonal communication skills to collaborate with colleagues, stakeholders, and vendors effectively and clearly in a remote hybrid work environment. 
  
  
• Ability to travel occasionally including overnight stay driven by business need. 
  
  
• This position must be able to work East Coast hours. ​#LI-Hybrid

Location Classification – Hybrid: ​

This role will be required to work onsite 2 days a week (Tuesday and Wednesday), or more depending on business needs.​

Compensation:

The expected salary range for this position is $130,000 – $165,000. Actual pay will be determined based on experience, qualifications, location, and other job-related factors permitted by law. A discretionary annual bonus may be available based on individual and Company performance.