Senior Analyst, Global Privacy Compliance

What You Will Do

• Work with program leads and counsel to support the receipt, management, and appropriately response to inquiries regarding privacy practices from government and regulatory agencies, customers, patients, employees, and other stakeholders.
• Support the execution of requirements with global/regional authorities and regulators, including filings, registrations, appointments etc.
• Conduct and review Data Privacy Impact Assessments, ensuring alignment with the global privacy DPIA directive and risk assessment requirements.
• Assist with review, assessment, and response to individual rights requests. Including tracking metrics and KPIs for reporting.
• Support ongoing auditing and monitoring activities in coordination with other appropriate functions, such as Internal Audit, Compliance, IT Security, and Legal.
• Foster a continuous improvement mindset and propose enhancements to the Privacy program and strategies informed by business needs, industry trends, and best practices.
• Exercise excellent judgment in identifying and escalating issues to management and/or for legal review in a timely manner.
• Maintains a knowledge of Stryker's product lines, competitive environment and customers to better support functional initiatives and provide recommendations to internal stakeholders.
• Monitor and track status of privacy requests and assessments and proactively provide updates, as requested.
• Identify system or process improvements that increase efficiency, compliance, or reduce cost to the business.

What You Will Need

Required

• Bachelor's degree.
• Minimum 2 years of hands-on professional experience executing or managing enterprise data privacy, data protection, or privacy management programs.
• Demonstrated hands-on experience conducting and documenting Privacy Impact Assessments (PIAs) and Data Protection Impact Assessments (DPIAs), including evaluating data processing activities, identifying privacy risks, and recommending mitigation measures.
• Hands-on experience managing Data Subject Access Requests (DSARs) and Data Subject Rights (DSR) requests, including request intake, evaluation, tracking, response coordination, and regulatory timelines.
• Practical experience applying privacy risk assessment methodologies or frameworks to identify, assess, document, and mitigate data privacy risks within an enterprise privacy program.
• Hands-on experience using OneTrust to execute privacy management activities, including privacy assessments, data subject rights requests, risk assessments, or privacy program workflows.
• Experience collaborating with Legal, Compliance, Information Security, and business stakeholders to implement enterprise privacy requirements and support privacy governance activities.

Preferred

• 5 or more years of professional experience executing enterprise privacy management, data protection, or global privacy operations programs.
• Advanced proficiency with OneTrust, including PIA/DPIA assessments, DSAR workflows, privacy risk management, and reporting.
• Experience supporting global privacy programs within multinational organizations, including cross-border data protection requirements.
• Working knowledge of global privacy regulations, including GDPR, CCPA, CPRA, and other applicable data protection laws.
• Experience applying enterprise privacy risk management methodologies.
• Professional privacy certifications such as CIPP/US, CIPP/E, CIPM, or CIPT.
• Experience developing privacy program metrics, dashboards, process improvements, or workflow automation.
• Experience working within a large, global, matrixed organization.
• Experience within the medical device, healthcare technology, or another highly regulated industry.