Global Privacy Associate

What We Do

Care Access is a unique, multi-specialty network of research sites that operates as one connected team of physician investigators, nurse coordinators, and operations managers. Our goal is to engage every healthcare professional in clinical research and to make clinical trials a care option for every patient. By removing this bottleneck, Care Access is helping accelerate the approval and delivery of critical and life-saving therapies.

Who We Are

We care. Our people are the engines behind our mission: to revolutionize access to clinical trials for the benefit of patients everywhere. We care for one another, find new ideas to accelerate medicine, and seed a long-term impact for generations.

Position Overview

As Care Access’ Global Privacy Associate, you will report to the Global Privacy Program Manager to support the day-to-day operations and the strategic development of the company’s global data protection program. You will assist in implementing data privacy compliance processes and provide operational support to the Privacy Program to perform privacy operations and assist with matters related to data protection and regulatory compliance. In this role, you will also engage with various departments to support inbound requests, including but not limited to supporting RFPs and RFIs, audits of Care Access’ privacy program, privacy impact assessments, data transfer impact assessments, and customer and vendor contracting.

• Report to the Global Privacy Program Manager to:
• Support the implementation and documentation of global privacy requirements and compliance processes, including operational and technical implementation of privacy controls, including privacy by design and other key privacy principles, for a company engaging in global clinical research.
• Assist in research and documentation related to compliance with HIPAA, GDPR, LGPD, and the clinical research regulatory landscape.
• Track and advise the company on emerging developments in artificial intelligence regulation.
• Provide operational support to the Global Privacy Program Manager on data protection compliance activities
• Support with design and implementation processes to ensure privacy impact assessments, data mapping, reporting, and other due diligence and compliance activities are timely and properly conducted.
• Support Care Access audit responses, RFPs and RFIs, and customer due diligence questionnaires.
• Support the onboarding, implementation, and administration of technical solutions for the privacy program, including data mapping software.
• Maintain established privacy KPIs; report on trends to the Global Privacy Program Manager; identify and implement necessary process changes.
• Collaborate with Information Security, IT, Clinical, Regulatory, and other groups to maintain and enforce proper controls and approvals are in place for all aspects of the privacy program.
• Support the continuous improvement of privacy program operations and processes
• Ensure all inquiries are responded to in a timely manner and meet or exceed business requirements.
• Be an active and engaged member of the Care Access Legal team; support Legal team priorities and projects as directed

• This is a remote position with less than 10% travel requirements. Occasional planned travel may be required as part of the role. 

• Role Requirements:
• Bachelor’s degree and 3+ years’ experience implementing and advising on a global privacy compliance program.
• 2+ years’ experience as a privacy advisor in the healthcare / life sciences industry, strong preference for experience in clinical research and/or pharmaceutical sector.
• Practical experience interpreting and applying international privacy laws and regulations.

• Knowledge, Skills and Abilities:
• Strong knowledge of global data protection and artificial intelligence laws and regulatory developments, including but not limited to familiarity with US, Canadian, and European data protection standards.
• Knowledge of privacy and security regulations relevant to health data and clinical research, including but not limited to HIPAA.
• Conversant in data security standards and risk management.
• Ability to explain privacy principles in a crisp, clear way that is easy for non-experts to understand and apply.
• Practical knowledge and experience interpreting privacy rules into pragmatic and actionable controls. 
• Positive, “how can I help?” mindset and self-driven commitment to excellent quality standards
• Ability to track and remain current on all developments in relevant law and regulation. 

• CIPP certification(s) strongly preferred.

Diversity & Inclusion

We serve patients and researchers from diverse cultures and communities around the world. We are stronger and better when we build a team representing the people we aim to support. We maintain an inclusive culture where people from a broad range of backgrounds feel valued and respected as they contribute to our mission. We value diversity and believe that unique contributions drive our success.

At Care Access, every day, we are advancing medical breakthroughs. We’re uniting standard patient care with cutting-edge treatments and research. Our work brings life-changing therapies to those in need and paves the way for newer and greater treatments to reach the world. We’re proud to advance these breakthroughs and work with the big players while engaging with the

physicians and caring for patients.

We are an equal opportunity employer, and all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity or expression, pregnancy, age, national origin, disability status, genetic information, protected veteran status, or any other characteristic protected by law.

Care Access is unable to sponsor work visas at this time.

Employment Statement

Care Access complies with all employment laws and regulations with respect to its employment practices, terms and conditions of employment, and pay equity and wages. Care Access does not engage in any unfair or forced labor practice and does not tolerate, under any circumstances, the use of any form of forced or involuntary labor, child labor, or human trafficking. This extends to suppliers, partners, or other third parties with whom Care Access does business. Care Access values and promotes the protection of human rights everywhere.