Description

Job Description

General Summary:

Privacy Operations Associate Director

About the Role

The Privacy Operations Associate Director supports the Privacy Operations Director in developing and maintaining the company's ongoing privacy-related efforts. This role manages the Privacy by Design (PbD) processes, delivers training, oversees potential data incident investigations, and provides solutions-oriented, risk-based advice to internal clients regarding the collection, processing, and storage of personal data.

Key responsibilities also include managing metrics and reporting, identifying opportunities for programmatic mitigations and controls, and implementing operational improvements as the company and program expand.

Key Duties & Responsibilities

• Program Management & Compliance: Develop and mature processes and procedures to maintain compliance with the Global Data Privacy Policy and applicable data protection laws, regulations, and guidelines.
• Training & Awareness: Develop and review content for training materials, guidance documents, and communications to increase employee understanding of privacy policies, data handling practices, legal obligations, and best practices.
• Process Ownership: Serve as the primary owner for the design and maintenance of the Data Inventory, Triage, Assessment, and Data Protection Impact Assessment (DPIA) processes.
• Risk Assessment & Mitigation: Perform regular privacy assessments of low and medium-risk business processes, providing practical and timely advice to internal clients to ensure compliance while protecting the company's integrity and reputation.
• Stakeholder Collaboration: Work with the network of "Super Users" and "Privacy Champions" (individuals embedded in the business) through regular touchpoints, training, and strategic direction. Assist process owners and Super Users in completing data inventories and DPIAs, coordinating with the business and the global Data Protection Officer (DPO) to mitigate residual risks.
• Vendor Risk Management: Mature the vendor privacy and security risk management process with the Third Party Risk Management (TPRM) team to ensure vendors with access to personal data are appropriately vetted.
• Monitoring & Auditing: Support the monitoring and auditing plan for compliance with internal data protection policies and processes, coordinating with Internal Audit, the Office of Business Integrity and Ethics, or external auditors.
• Incident & Request Response: Support the process for responding to data subject requests and reports of potential data incidents (in coordination with Privacy Counsel and Litigation).
• Metrics & Reporting: Maintain and enhance privacy program metrics and reporting, driving the implementation and maintenance of appropriate reporting tools (e.g., Tableau).
• Privacy by Design (PbD): Coordinate with business units to embed privacy triggers within organizational processes, such as the Software Development Lifecycle (SDLC), to proactively integrate privacy across the organization.
• Technology & Tools: Work with the data technology & engineering team to identify and employ internal tools to strengthen operational processes and implement improved programmatic mitigations and controls.
• Regulatory Intelligence: Keep abreast of global privacy developments (e.g., EU guidance, US state laws, e-privacy developments) and proactively anticipate changes needed for the global privacy program.

Required Qualifications

Education

• Bachelor's degree

Experience

• Typically requires 5 years of experience in Privacy Operations within a company or as an external advisor.
• Strong working knowledge of data mapping technology (e.g., OneTrust or similar tool).
• Demonstrable program management skills, including strong organizational and multi-tasking abilities.
• Ability to prioritize workload and projects with minimal supervision.
• Demonstrated teamwork and collaboration skills.
• Exceptional written, oral, and presentation skills.

#LI-DB1

#HYBRID

Pay Range:
$168,800 - $253,200

Disclosure Statement:

The range provided is based on what we believe is a reasonable estimate for the base salary pay range for this job at the time of posting. This role is eligible for an annual bonus and annual equity awards. Some roles may also be eligible for overtime pay, in accordance with federal and state requirements. Actual base salary pay will be based on a number of factors, including skills, competencies, experience, and other job-related factors permitted by law.

At Vertex, our Total Rewards offerings also include inclusive market-leading benefits to meet our employees wherever they are in their career, financial, family and wellbeing journey while providing flexibility and resources to support their growth and aspirations. From medical, dental and vision benefits to generous paid time off (including a week-long company shutdown in the Summer and the Winter), educational assistance programs including student loan repayment, a generous commuting subsidy, matching charitable donations, 401(k) and so much more.

Flex Designation:
Hybrid-Eligible Or On-Site Eligible

Flex Eligibility Status:

In this Hybrid-Eligible role, you can choose to be designated as:
1. Hybrid: work remotely up to two days per week; or select
2. On-Site: work five days per week on-site with ad hoc flexibility.

Note: The Flex status for this position is subject to Vertex's Policy on Flex @ Vertex Program and may be changed at any time.

#LI-Hybrid

Company Information

Vertex is a global biotechnology company that invests in scientific innovation.

Vertex is committed to equal employment opportunity and non-discrimination for all employees and qualified applicants without regard to a person's race, color, sex, gender identity or expression, age, religion, national origin, ancestry, ethnicity, disability, veteran status, genetic information, sexual orientation, marital status, or any characteristic protected under applicable law. Vertex is an E-Verify Employer in the United States. Vertex will make reasonable accommodations for qualified individuals with known disabilities, in accordance with applicable law.

Any applicant requiring an accommodation in connection with the hiring process and/or to perform the essential functions of the position for which the applicant has applied should make a request to the recruiter or hiring manager, or contact Talent Acquisition at ApplicationAssistance@vrtx.com