Director, Technology and Privacy Counsel (Remote/Flexible)

Insulet started in 2000 with an idea and a mission to enable our customers to enjoy simplicity, freedom and healthier lives through the use of our Omnipod® product platform. In the last two decades we have improved the lives of hundreds of thousands of patients by using innovative technology that is wearable, waterproof, and lifestyle accommodating.

Job Profile Title: Director, Technology and Privacy Counsel

Business Title: Director, Privacy Counsel

Department: Legal Department

FLSA Status: Exempt

Position Overview:

The Director, Technology and Privacy Counsel is a key role within the Legal Department. This position reports to the Vice President, Chief Data Compliance and Privacy Officer and will provide strategic advice to Insulet’s commercial and product development organizations regarding compliance with GDPR, CCPA, HIPAA and other applicable global data, technology and privacy laws and identify, assess and mitigate risk. The candidate will also work closely with Insulet’s Privacy Operations team and other functions developing strategy, advising on risk and on implementation of controls, and monitoring compliance with data, technology and privacy rules and regulations.

This role requires a highly collaborative individual with deep domain expertise prepared to work within our fast-paced, high-performance global environment, capable of driving a robust culture of data, technology and privacy compliance.

Responsibilities:

• Lead complex projects overseeing compliance with data, technology and privacy laws and regulations globally. Areas of concern may include Artificial Intelligence (AI) and other technologies.
• Provide proactive legal privacy advice to the Privacy Operations team, and act as a business partner to key functions such as Data Science, Sales & Marketing, Medical Affairs, Market Access and HR on data, technology and privacy topics.
• Identify legal privacy and technology risks affecting the company and collaborate with senior management to mitigate risks while helping grow Insulet’s business.
• Initiate, manage and drive legal privacy workstreams to provide assessments of various Insulet products and initiatives, and actionable advice, to a global cross-functional team.
• Draft, review and negotiate privacy and technology related agreements with customers (B2B and B2C), vendors and partners and advise on and negotiate privacy and technology related issues within commercial and research contracts.

• Providing legal advice and support documentation  of internal data, technology and privacy policies, procedures and privacy notices. Responsible for drafting certain legal documentation as appropriate.
• Provide guidance and manage responses to privacy complaints (data subject rights), data protection incidents and events and communications with regulators as needed, in coordination with other functions.
• Follow and advise on major developments in privacy, data and technology laws.
• Manage external counsel engagements across multiple jurisdictions.
• Provide legal advice to all stages of development of AI projects and liaise with key stakeholders such as Information Security, Data Science, Medical Affairs, Privacy Operations teams.
• Represent Privacy in company cross-functional working groups, e.g. relating to the company’s franchises and with other supporting organizations.
• Identify areas of potential data, technology and privacy regulatory vulnerability and risk.
• Support global privacy programs and policies in partnership with leaders across the company; specific key geographies to include Europe and/or North America as needed, as well as additional regions as assigned.
• Participate in the development and maturing of policies and processes and the implementation of global systems, leading in designated domains and geographies.
• Collaborate effectively with other company functions to implement initiatives supporting compliance.
• Track and identify changes in relevant US and global laws, industry standards, and trends affecting compliance, privacy and local licensing activities and modify compliance program strategies accordingly.
• Support the Chief Data Compliance and Privacy Officer in other work as assigned.

Key Decision Rights:

• Authority to review, advise, negotiate, develop documents consistent with overall direction and strategy set by the Chief Data Compliance and Privacy Officer.
• Decision-making power concerning operational procedures, and risk management initiatives related to data, privacy and technology compliance with privacy and technology related laws and regulations.
• Serve as key liaison for all internal teams concerning updates in relation to US and global laws related to data, technology, AI and privacy.
• Decision-making authority  on risk allocation and mitigation of data protection and other technology related risks.
• Authority to initiate internal reviews to evaluate compliance.
• Liaise directly with internal and external parties as necessary and appropriate.

Required Leadership/Interpersonal Skills and Behaviours:

• Demonstrated domain expertise, including data, technology and privacy law, and its application to medical technology and data ecosystems.
• Exceptional interpersonal and communication skills.
• Proven capacity to influence, build trust, work independently and collaboratively, and engage and collaborate effectively at all levels of the company.
• Proven strong problem resolution skills and ability to multitask, prioritize and respond to emerging issues effectively in a challenging, fast-paced environment.
• High degree of integrity and professional ethics.

Required Skills and Competencies:

• Strong working knowledge of medical device regulatory frameworks relevant to data, technology and privacy. Familiarity with European, US, Canadian, Middle Eastern, Australian and Malaysian privacy regulatory regimes preferred.
• Ability to operate effectively in a fast-paced and matrixed environment.
• Aptitude for innovative and strategic business thinking and analysis; excellent risk-based judgment and problem-solving skills.
• Capacity to distill complex information and effectively communicate essential aspects.
• Proficiency with productivity suite software (e.g. Microsoft 365) and comfortable with learning and using enterprise and collaboration tools (e.g., Veeva, Salesforce) and other licensed SaaS tools.

Education and Experience:

• Demonstrated experience in privacy, preferably in a medical device, life sciences, pharmaceutical, or health care provider or payor environment, either as an internal resource or consultant.
• Juris Doctor and bar membership or equivalents required.
• AI and Privacy Certifications preferred.

Additional Information:

• General office environment.
• Domestic and/or international travel may be required up to 20% of the time.
• Remote/Hybrid role. UK/EU.

NOTE: This position is eligible for 100% remote working arrangements (may work from home/virtually 100%; may also work hybrid on-site/virtual as desired). #LI-Remote  #LI-JW1

Please read our Privacy Notice to learn how Insulet handles your personal information when you apply for a vacancy with us here.