ERT is looking to hire a Data Privacy Engineer to contribute as part of the Data Privacy Team, to all on-going activities related to the development, implementation, maintenance of, and adherence to the company's data privacy and security governance program. This person will be the technical advocate for privacy decisions and discussions across the company and relied upon to provide engineering and product teams with the privacy expertise necessary to make confident product decisions.

1. Play a key role in driving architecture reviews, as well as global cross-company privacy reviews of products and services, aligned to ISO/IEC 27001, HIPAA/HITECH, and 21CFR Part 11 compliance.
2. Conduct “privacy-by-design” technical reviews for new products and services, ensuring required data privacy impact assessments are completed, where required, and identify any privacy concerns. Work closely with technical and non-technical teams, including R&D, Product Management, IT, and any other applicable stakeholders.
3. Provide product teams with the guidance and best practices to help protect data subjects’ privacy and mitigate any risk.
4. Work closely with IT-Security to ensure “security-by-design,” to ensure company-wide product and services define, implement, and document perimeter and internal network controls, host-based security controls, applications access controls and data access controls.
5. Implements, and manages, integration of privacy-software solutions used across the organization to support Program compliance.
6. Under the direction of the DPO, in accordance with the Program monitoring schedule, perform on-going monitoring of all company business units; document the results and implement any corrective actions or remediations that may be required.
7. Participate in internal and external data privacy audits, such as GDPR and HIPAA compliance.
8. In collaboration with other Data Privacy Team members, ensure applicable privacy and security requirements are incorporated in Policies, SOPs, and other controls, implemented for a project, product, or platform.
9. Act as a data privacy and compliance liaison, under the direction of the DPO, to the business, to ensure compliance with applicable data protection laws, such as GDPR, CCPA, and HIPAA.
10. Under the direction of the DPO, develops Program report metrics, e.g. against data privacy impact assessments, to aid the DPO in presenting Program metrics to the executive management team.
11. Maintains all related Program data in the central database to ensure that accurate and concise information is obtained and captured to allow reporting of Program-related obligations.
12. Provides general support and assistance to the DPO, when necessary, including filing, generating outgoing correspondence, archiving, and any other privacy and security-related projects necessary to support the Program.
13. Participates in meetings with the Data Privacy Team, and other departmental meetings, as needed.

OTHER DUTIES AND RESPONSIBILITIES:

1. Serve as an internal advisor, to the business, to efficiently (and effectively) manage internal (and external) data privacy inquiries.
2. Provide any due diligence support required for external vendors, including review of any required data privacy impact assessment checklist(s) and full assessment.
3. Stay abreast of global privacy legislation and regulatory requirements.
4. Provides other support, as necessary, by the DPO.

The duties and responsibilities listed in this job description represent the major responsibilities of the position.  Other duties and responsibilities may be assigned, as required.  ERT reserves the right to amend or change this job description to meet the needs of ERT.  This job description and any attachments do not constitute or represent a contract.

1. B.S. or M.S. in Computer Science, Information Systems, or related field or equivalent experience.

1. Demonstrated technical knowledge of architecture reviews, aligned to ISO/IEC 27001, HIPAA/HITECH, and 21CFR Part 11 compliance.
2. Possess one or more advanced professional privacy or security certifications related to chosen discipline (e.g. CIPP, CISSP, etc.) is highly-desired.
3. 4+ years of work experience in privacy engineering or security engineering.
4. Demonstrated experience working IT, Security, and R&D teams to achieve a coordinated privacy and security practice.
5. Experience working in a highly-regulated industry, ensuring compliance with GDPR, CCPA, HIPAA and other regulatory requirements.

7. Experience communicating highly-technical concepts to a non-technical audience.

1. Have defined, documented, implemented, and established privacy policies and procedures across the organization.
2. Ability to manage and communicate with multiple stakeholders in a fast-paced work environment.
3. Effective organizational, analytical, confidentiality, multi-tasking, and time management skills.
4. Strong presentation skills, particularly in the development of professional and thoughtful materials.
5. Excellent judgment, attention to detail, communication and direct customer skills, plus the ability to work as part of a team, as well as an individual contributor.
6. Must be able to travel both domestic and internationally (~10-15%)

We are an equal opportunity employer and all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability status, protected veteran status, or any other characteristic protected by law.