- Company Name
- 10X Health System
- Job Title
- Data Privacy Specialist
- Job Description
-
Job Title: Data Privacy Specialist
Role Summary:
Leads and evolves the privacy program across clinical and corporate operations, ensuring compliance with healthcare, privacy, and data protection regulations for telehealth and wellness services.
Expectations:
- Translate complex privacy regulations into actionable, clear processes.
- Maintain up‑to‑date policies, records, and documentation for compliance readiness.
- Operate in a fast‑paced, growth‑oriented environment, adapting to evolving regulatory demands.
Key Responsibilities:
- Manage OneTrust workflows: data mapping, cookie banners, and individual data rights requests.
- Review, update, and enforce data processing agreements (DPAs) and vendor practices.
- Coordinate privacy incident response with Legal and IT, documenting all actions.
- Conduct privacy risk assessments; identify gaps and recommend practical solutions.
- Support internal and external audit preparation, including SOC 2 certification initiatives.
- Track changes in U.S. and international privacy laws (HIPAA, CCPA, CPRA, GINA, GDPR, FTC guidance).
- Develop and deliver staff training and awareness programs focused on privacy compliance.
- Partner with product and business owners to embed privacy‑by‑design into new offerings.
Required Skills:
- Deep knowledge of healthcare privacy frameworks (HIPAA, CCPA, CPRA, GINA, GDPR, FTC guidance).
- Proficient with OneTrust: data mapping, cookie consent, data classification, rights fulfillment.
- Experience conducting audits, risk assessments, and vendor reviews.
- Strong analytical, project management, and cross‑functional collaboration skills.
- Clear communicator able to translate regulatory concepts into practical processes.
Required Education & Certifications:
- Bachelor’s degree (preferred advanced degree: JD, MPH, MBA, or related).
- 3–5 years of healthcare privacy compliance and affairs experience.
- Certifications such as CIPP/US, CIPP/E, or CIPM are preferred but not mandatory.
Scottsdale, United states
Hybrid
Junior
04-01-2026