Privacy & Compliance Co-ordinator (CIPP)

Privacy and Compliance Coordinator 


Position Summary

The Privacy & Compliance Coordinator supports the Company's privacy, compliance, and governance initiatives by coordinating day-to-day compliance activities, maintaining documentation, assisting with audits, supporting employee training, monitoring regulatory updates, and helping ensure compliance with applicable laws, regulations, and organizational policies. The role works collaboratively across departments to support privacy operations, vendor compliance, policy management, AI governance initiatives, sustainability program and reporting, and organizational risk management while providing administrative and project coordination support to the Director of Contracts & Compliance.

Essential Functions

Privacy & Compliance

• Supports the design, development, implementation, and ongoing maintenance of a comprehensive privacy compliance program.
• Coordinate day-to-day privacy and compliance activities.
• Serve as a primary contact for privacy-related inquiries.
• Maintain the Privacy Inbox and Privacy Management Software.
• Assist with privacy complaints, incident documentation, investigations, and follow-up.
• Ensures compliance with applicable federal, state, and international privacy laws and regulations, including those governing healthcare and medical affairs.
• Support HIPAA/HITECH, GDPR, and applicable privacy compliance activities.
• Assist with breach risk assessments, notifications, and documentation.
• Maintain privacy notices, consent forms, and confidentiality documentation.
• Support annual HIPAA/HITECH audits and compliance recertification.
• Coordinate monthly Privacy & Security meetings, agendas, minutes, and action items.
• Collaborate with IT and other departments on privacy and security initiatives.
• Coordinate implementation of the company's sustainability program and annual objectives.
• Support development and execution of sustainability initiatives across all business functions.

Compliance & Training

• Assist with compliance monitoring and internal audits.
• Maintain compliance records, reports, and KPIs.
• Monitor regulatory changes and communicate updates.
  
• Coordinate employee privacy and compliance training.
• Support remediation and corrective action activities.
• Assist leadership with compliance projects and reporting.

Governance & Risk

• Coordinate policy reviews and updates.
• Maintain compliance calendars and documentation.
• Assist with vendor risk assessments and client questionnaires.
• Maintain BAAs, DPAs, and related documentation.
• Support AI governance documentation and approved AI tool tracking.
• Assist with sustainability/ESG questionnaires and reporting as assigned.
• Perform other duties as assigned.

Position Qualifications

• Above average attention to detail, teamwork and initiative.
• Ability to interact with other departments within the company and be proficient in e-mail and verbal communication.
• Proficient in Microsoft Excel, Power Point and Word and quickly able to learn new software.

Competency Statements

• Self-Motivated - Ability to be internally inspired to perform a task to the best of one's ability using his or her own drive or initiative.
• Organized - Possesses the trait of being well organized or following a systematic method of performing a task.
• Accuracy - Ability to perform work accurately and thoroughly.
• Technical Aptitude - Ability to comprehend complex technical topics and specialized information.
• Tactful - Ability to show consideration for and maintain good relations with others.
• Responsible - Ability to be held accountable or answerable for one's conduct.
• Problem Solving - Ability to find a solution for or to deal proactively with work-related problems.
• Active Listening - Ability to actively attend to, convey, and understand the comments and questions of others.
• Customer Oriented - Ability to take care of the client needs while following company procedures.
• Communication, Written - Ability to communicate in writing clearly and concisely.
• Communication, Oral - Ability to communicate effectively with others using the spoken word.
• Applied Learning - Ability to participate in needed learning activities in a way that makes the most of the learning experience.

Skills and Abilities

Education: Bachelor's degree in business administration, Healthcare Administration, Human Resources, Information Systems, Legal Studies, or a related field, or equivalent experience.

Experience: One to three years of experience in privacy, compliance, quality, healthcare administration, HR, contracts, legal support, or a related field preferred.

Preferred Knowledge: Familiarity with HIPAA, GDPR, privacy regulations, Microsoft Office, SharePoint, and working with confidential information. Professional certifications (Certified Information Privacy Professional/ CIPP) are a plus but not required.

Skills

• Strong organization and attention to detail
• Excellent written and verbal communication
• Ability to manage multiple priorities
• Project coordination
• Confidentiality and professionalism
• Microsoft Office proficiency
• Ability to work collaboratively across departments

WORK ENVIRONMENT

Remote Europe

Disclaimer

By attaching your Curriculum Vitae (CV), resume, and/or completing an online application, you are consenting to the collection, processing, use, transfer (including but not limited to other countries/jurisdictions), storage, and disclosure of your personal data as described in the Med Communications, Inc. Privacy Policy. Please read this policy carefully for more information on your rights regarding personal data protection.

We are an equal opportunity employer and all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, age, disability, genetic information, or veteran status.

Recruitment Agency Notice:

Thank you for your interest in working with Med Communications. We kindly ask that recruitment agencies avoid sending unsolicited CVs, as our in-house team manages all hiring processes.

Please be aware that any unsolicited CVs or candidate profiles received without prior engagement or agreement with our recruitment team will be considered free and carry no obligation on the part of Med Communications. We thank you for your compliance with our policy.

Should collaboration opportunities arise, we will reach out to preferred partners proactively. Your understanding and cooperation are appreciated.