Highlights
Partner directly with product and engineering teams to evaluate training datasets at the database level, ensuring technical compliance with privacy-by-design, data minimization, and cross-border transfer laws. Must have a proven track record of directly negotiating complex commercial DPAs and BAAs with sophisticated enterprise hospital buyers without relying on outside counsel.
Numbers & Facts
| Location | Menlo Park, CA |
| Industry | Staffing/Employment Agencies |
| Salary | $85 |
| Company Size | 2,000 to 2,499 employees |
| Year Founded | 2000 |
| Website | http://www.lancesoft.com/ |
Description
Job Description.
LanceSoft is a certified Minority Business Enterprise (MBE) and an equal opportunity employer. We prohibit discrimination and harassment of any kind based on race, color, sex, religion, sexual orientation, national origin, disability, genetic information, pregnancy, or any other protected characteristic as outlined by federal, state, or local laws.
This policy applies to all employment practices within our organization, including hiring, recruiting, promotion, termination, layoff, recall, leave of absence, compensation, benefits, training, and apprenticeship. LanceSoft makes hiring decisions based solely on qualifications, merit, and business needs at the time.
- Directly review, redline, and negotiate privacy/data-use terms in client contracts. Personally draft and execute custom Data Processing Agreements (DPAs) for EU healthcare systems and Business Associate Agreements (BAAs) for US hospital networks, ensuring Client retains critical rights to use de-identified metadata for AI training.
- Own the end-to-end operational heavy lifting required to fulfill and self-certify under the EU-U.S. Data Privacy Framework (DPF), the UK Extension, and the Swiss-U.S. DPF.
- Personally author Data Protection Impact Assessments (DPIAs) for new AI models and features from scratch. Build and maintain Article 30 Records of Processing Activities (RoPA) and ensure adherence to HIPAA’s De-identification Standards.
- Partner directly with product and engineering teams to evaluate training datasets at the database level, ensuring technical compliance with privacy-by-design, data minimization, and cross-border transfer laws.
- Experience: 5+ years of dedicated, hands-on privacy execution in HealthTech, MedTech, or a clinical SaaS environment.
- Legal/Contract Fluency: A JD or equivalent legal background is strongly preferred. Must have a proven track record of directly negotiating complex commercial DPAs and BAAs with sophisticated enterprise hospital buyers without relying on outside counsel.
- Technical Execution: Demonstrable experience mapping actual data flows in cloud infrastructure (AWS/Azure) and handling data anonymization protocols.
- Preferred Certifications: Active IAPP credentials required (CIPP/E, CIPP/US, CIPM).
LanceSoft is a certified Minority Business Enterprise (MBE) and an equal opportunity employer. We prohibit discrimination and harassment of any kind based on race, color, sex, religion, sexual orientation, national origin, disability, genetic information, pregnancy, or any other protected characteristic as outlined by federal, state, or local laws.
This policy applies to all employment practices within our organization, including hiring, recruiting, promotion, termination, layoff, recall, leave of absence, compensation, benefits, training, and apprenticeship. LanceSoft makes hiring decisions based solely on qualifications, merit, and business needs at the time.
About Company
We are a $125 Million, NMSDC-certified Minority & Woman owned Workforce Solutions Company headquartered in the DC metro area with presence across US with global presence - Canada, Mexico, India, UK, Malaysia, Indonasia, Hongkong, Singapore, UAE. We are specialized in providing Workforce Solutions, SOW project delivery, Engineering Solutions, Creative Services. We currently support 100+ Fortune companies globally and across multiple industry segments. We are currently supporting several massive programs across industry segment nationally/globally (Intel, Ally, AMD, QUALCOMM, Morgan Stanley, Kraft/ Mondelez, MNP, Amdocs, Dell, SanDisk, Medtronic, Becton Dickinson, GE, Lockheed Martin, UTC, L-3 Communications, Caterpillar, BMW, Mercedes Benz, National Grid, Dominion, Energy Future Holdings, PSEG, 3M, Fidelity, Aetna, Humana, Johnson & Johnson, Pfizer, Merck etc).
All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender, identity, national origin, disability, or protected veteran status.