Privacy Specialist

Supports privacy-related incident response by maintaining timelines, assembling records, coordinating follow-up items, and documenting notifications and remediation activities as directed. Assists with vendor and business-project privacy reviews by gathering information, validating documentation, tracking open items, and escalating issues as appropriate.

Privacy Specialist
6 Months Contract
San Diego, CA

Job Description:
Privacy Specialist
Position Summary: We are looking for a Privacy Specialist (Paralegal Preferred) to provides temporary compliance and operational support to Acadia’s privacy program under the direction of the Sr. Director, Compliance & Privacy. Supports privacy reviews, documentation, incident response activities, training, and program administration. Partners with Legal, Compliance, Information Security, IT, and business stakeholders while managing multiple assignments and maintaining sensitive and confidential information. to help support our privacy program. This is an in-person role located in our San Diego office.  This position reports into the Sr. Dir. Compliance & Privacy.
 
Duties

• Supports the intake, coordination, tracking, and documentation of privacy-related requests, reviews, and projects.
• Conducts legal and regulatory research on data privacy, artificial intelligence, and related requirements, and prepares clear summaries or memoranda.
• Assists with vendor and business-project privacy reviews by gathering information, validating documentation, tracking open items, and escalating issues as appropriate.
• Supports privacy-related incident response by maintaining timelines, assembling records, coordinating follow-up items, and documenting notifications and remediation activities as directed.
• Support the Sr. Dir. Privacy & Compliance with the completion of DPIAs, PIAs, and other privacy assessments for clinical research, patient programs, vendor systems, and business processes.
• Work cross-functionally with business teams to maintain RoPAs, data inventories, and data mapping records for key business activities.
• Works closely with cross-functional partners in Compliance, Legal, Information Security, IT, and business functions to move privacy matters forward within required timelines.
• Support compliance with privacy laws and regulations, including GDPR, CCPA/CPRA, U.S. state privacy laws, and other health data laws where applicable.
• Help maintain privacy policies, procedures, notices, templates, and training materials.
• Assist with privacy reviews for processing activities, such as clinical trials, patient services, pharmacovigilance, medical affairs, and commercial programs.
• Help collect evidence and track follow-up items for assessments, reviews, and remediation activities.
• Performs project administration responsibilities and other assignments as needed or directed.

 
Education/Experience/Skills:
Education

• A paralegal certificate (preferred) or a bachelor’s degree and a minimum of 5 years of corporate privacy, compliance, or related legal support experience. An equivalent combination of relevant education and applicable job experience may be considered. Experience supporting privacy matters, including privacy documentation, legal research, contract terms, or program administration, is required. Experience in the pharmaceutical or biotech industry is highly desired.
• Skills
• Working knowledge of privacy principles and terminology; familiarity with laws and frameworks such as GDPR and applicable U.S. Federal & state privacy laws is preferred.
• OneTrust expertise preferred, strong computer literacy, including Microsoft Office, and the ability to learn privacy, contract, and workflow systems required.
• •     
• Strong research, analytical, critical-thinking, and written communication skills.
• High attention to detail and the ability to cross-check and validate information for accuracy.
• Ability to manage multiple priorities, meet deadlines, and work efficiently in a high-volume environment.
• Excellent professional ethics, integrity, and judgment, with discretion in handling sensitive and confidential information.
• Ability to work independently while collaborating effectively with attorneys, privacy professionals, technical teams, and business stakeholders.
• Ability to follow a process carefully, pay attention to details, and document work clearly.
• Communication and teamwork skills: comfortable asking questions, sharing what you tried, and collaborating with others to solve problems.
• Professionalism and integrity when handling sensitive information (security work often involves confidential data).

Physical Requirements:

• This role involves regular standing, walking, sitting, and the use of hands for handling or operating equipment. The employee may also need to reach, climb, balance, stoop, kneel, crouch, and maintain visual, verbal, and auditory communication both in a standard office environment and while working independently from remote locations. Employee must occasionally lift and/or move up to 20 pounds.  This position requires the ability to work after hours as required by business needs.