Sr Privacy Compliance and Ops Manager

Job Description

Primary Function of Position We are seeking a strategic privacy compliance and operations individual contributor to help shape and scale Intuitives global privacy program. This role partners across all business teams to implement priorities drive enterprise privacy initiatives and translate privacy requirements into scalable processes controls and governance. The ideal candidate brings strong project leadership risk management and operational excellence and is comfortable working in a fast-paced regulated environment. This role will help implement the roadmap for privacy compliance operations strengthen governance and assessment models and elevate the programs overall maturity and business impact.

The Privacy Compliance & Operations reports to the Senior Director of Privacy Compliance & Operations and is a function of the global Privacy team within the Legal department and partners with IT and product security product managers  procurement and all other business teams to operationalize privacy requirements through effective governance assessments documentation training and monitoring  to enable compliant trustworthy and responsible data use across Intuitives business processes products and systems.

This role will act as a privacy compliance and operations professional responsible for implementing legal and regulatory requirements into practical processes and controls managing cross-functional initiatives supporting audit and regulatory readiness and reducing privacy risk through scalable compliance operations and strong stakeholder engagement.

Essential Job Duties

• Partner with cross functional global business stakeholders to operationalize privacy requirements.

• Lead privacy assessments including DPIAs/PIAs data transfer reviews and risk reviews for products systems vendors and business initiatives.

• Identify privacy risks assess control gaps and drive remediation with business legal and technical teams.

• Implement cross-functional privacy initiatives from strategy and roadmap development through execution tracking and executive reporting.

• Maintain key privacy program documentation including RoPA SOPs decision logs evidence repositories and related records.

• Partner with technical and business teams to embed privacy requirements into processes systems and data practices.

• Help shape privacy governance compliance monitoring and risk management strategies aligned with applicable laws business priorities and internal policies.

• Participate in privacy incident response activities including intake documentation follow-up actions and lessons learned.

• Help improve data subject rights operations including intake tracking coordination metrics and process improvement.

• Support third-party privacy reviews due diligence remediation tracking and ongoing monitoring.

• Develop metrics dashboards and executive reporting to track program performance emerging risks and overall privacy program maturity.

• Drive process improvements standardization and tooling enhancements across privacy operations.

• Serve as a strategic advisor to stakeholders by providing practical risk-based guidance and influencing privacy decisions across the business.

• Develop training communications and playbooks to support consistent privacy practices across teams and regions.

Qualifications :

Required Skills and Experience

• 10 years of experience in privacy compliance privacy operations data protection or technical security governance risk and compliance (GRC) or privacy program management.

• Strong experience with privacy risk assessments compliance oversight gap remediation tracking and control monitoring.

• Proven success leading cross-functional projects and implementing strategic initiatives with strong project management and leadership communication skills.

• Strong understanding of global privacy requirements including but not limited to GDPR CCPA/CPRA HIPAA etc.

• Hands-on experience with core privacy compliance activities such as:

  • Privacy assessments DPIAs/PIAs and remediation tracking

  • RoPA data mapping and documentation management

  • Incident response coordination DSAR operations or vendor privacy reviews

  • Metrics reporting policy implementation and process improvement

• Experience working with privacy and compliance frameworks such as:

  • HITRUST

  • NIST Privacy Framework / NIST CSF

  • ISO 27001 / ISO 27701

  • SOC 2 or equivalent

• Ability to turn legal and policy requirements into scalable operational processes and controls.

• Strong analytical problem-solving and risk management skills.

• Excellent written and verbal communication skills with the ability to influence alignment across diverse teams.

• Experience working in global cross-functional environments.

Required Education and Training

• Bachelors degree in business Information Systems compliance risk management or related discipline

• At least one privacy certification such as CIPP/US CIPP/E CIPM CIPT or CDPSE

Preferred Skills and Experience (As applicable - Specific skills knowledge and experience that are not required to perform the job but are desirable to have)

• Experience building or scaling privacy compliance or privacy operations programs and helping define long-term strategy in a global organization.

• Experience with privacy tools or workflow platforms used for assessments intake case management metrics or evidence tracking.

• Experience influencing cross-functional roadmaps operating models or governance decisions in complex highly regulated environments.

• Experience supporting audit readiness regulatory inquiries or compliance testing including preparation for senior leadership or external stakeholder engagement.

• Familiarity with AI governance and emerging privacy risks.

• Experience in regulated industries such as healthcare life sciences academic research or medical device.

• Advanced degree in law risk management compliance Information Systems or related field.

**Please note this role requires being onsite in our Sunnyvale CA office three days per week.

Additional Information :

Due to the nature of our business and the role please note that Intuitive and/or your customer(s) may require that you show current proof of vaccination against certain diseases including COVID-19.  Details can vary by role.

Intuitive is an Equal Opportunity Employer. We provide equal employment opportunities to all qualified applicants and employees and prohibit discrimination and harassment of any type without regard to race sex pregnancy sexual orientation gender identity national origin color age religion protected veteran or disability status genetic information or any other status protected under federal state or local applicable laws.

Mandatory Notices

U.S. Export Controls Disclaimer:  In accordance with the U.S. Export Administration Regulations (15 CFR 743.13(b)) some roles at Intuitive Surgical may be subject to U.S. export controls for prospective employeeswho are nationals from countries currently on embargo or sanctions status.

Certain information you provide as part of the application will be used for purposes of determining whether Intuitive Surgical will need to (i) obtain an export license from the U.S. Government on your behalf (note: the governments licensing process can take 3 to 6 months) or (ii) implement a Technology Control Plan (TCP) (note: typically adds 2 weeks to the hiring process).  

For any Intuitive role subject to export controls final offers are contingent upon obtaining an approved export license and/or an executed TCP prior to the prospective employeesstart date which may or may not be flexible and within a timeframe that does not unreasonably impede the hiring need. If applicable candidates will be notified and instructed on any requirements for these purposes. 

We will consider for employment qualified applicants with arrest and conviction records in accordance with fair chance laws.

Preference will be given to qualified candidates who do not reside or plan to reside in Alabama Arkansas Delaware Florida Indiana Iowa Louisiana Maryland Mississippi Missouri Oklahoma Pennsylvania South Carolina or Tennessee.

This position may be filled at a different job level than listed here depending on
business need and/or on the selected candidates experience knowledge and skills.
Compensation will be based primarily on the job level at which the role is filled and the
candidates qualifications consistent with applicable law.

We provide market-competitive compensation packages inclusive of base pay incentives benefits and equity. It would not be typical for someone to be hired at the top end of range for the role as actual pay will be determined based on several factors including experience skills and qualifications. The target compensation ranges are listed.

Remote Work :

No

Employment Type :

Full-time