Senior Director of Compliance, Privacy and Information Governance

Who You Are

Reporting to the Chief Compliance Officer, the Senior Counsel/Director for Compliance, Privacy, and Information Governance will be responsible for providing strategic leadership, advising business stakeholders on legal, regulatory, and ethic standards, and developing operational ways to uphold these obligations at Altos Labs™ (Altos). This role will work closely with the Chief Compliance officer in the design, development, implementation, and management of compliance, privacy, and information governance programs and associated systems. In this role, you will collaborate with stakeholders across a global company to achieve the common goal of a high-integrity organization.

This leader is joining a startup company and is energized with the opportunity to build in and grow with a dynamic and growing global environment.  In this role, you will collaborate with stakeholders across global sites and functions to achieve the common goal of a high-integrity organization.

Compliance

• Provides leadership, partnership with key leaders, and guidance on compliance across business functions.
• Leads the development, implementation, and management of the compliance program to ensure employees and other relevant stakeholders understand and act in compliance with the Altos Code of Business Conduct and Ethics and other global/local policies, relevant laws and regulations, and industry codes.
• Implements and manages global policy governance and development of supporting processes.
• On compliance matters, leads cross-functionally to establish and maintain effective training and communication programs; compliance-related complaints and investigations frameworks and practices; auditing and monitoring; enforcement and discipline; as well as risk response and prevention practices.
• Provides legal expertise regarding regulatory and compliance issues, including regulations and practices related to global and local GxP requirements, fraud and corruption, transparency and competition.
• Track and report results of compliance investigations and the corrective actions taken to Compliance leadership and other internal key stakeholders as needed. Interpret findings/trends and carry out corrective action and retraining as needed.
• Monitor the legal, regulatory, and business developments and industry compliance best practices to evolve the compliance program through ensuring appropriate practices, processes, systems, and tools are in place and maintained to always support the business.
• Act as key ambassador for communication around key compliance topics, resources, and special initiatives.

Data Privacy

• Provides leadership, partnership with key leaders, and guidance on privacy across all business functions.
• Leads the development, implementation, and management of the privacy program to ensure employees and other relevant stakeholders understand and act in compliance with the Altos Code of Business Conduct and Ethics and other global/local policies, relevant laws and regulations, and industry codes.  Includes training; risk assessments/analysis, mitigation, and remediation; ongoing compliance monitoring; investigations and complaints management.
• Provides legal expertise regarding privacy issues, including regulations and practices related to HIIPAA, CAA, GDPR, and other relevant privacy laws and regulation.
• Takes a lead role, to ensure the organization has and maintains appropriate privacy and confidentiality consents, authorization forms and information notices and materials reflecting current organization and legal practices and requirements.
• Performs
• Monitor the global legal, regulatory, and business developments and industry privacy best practices to evolve the privacy program through ensuring appropriate practices, processes, systems, and tools are in place and maintained to always support the business.
• Collaborates with the information security function to ensure alignment between security and privacy compliance programs including policies, practices, and investigations, and acts as a liaison to the information systems department.
• Leads in fostering information privacy awareness within the organization.
• Serves as an information privacy resource to the organization regarding the release of information and to all departments for all privacy-related issues.

Information Governance

• Provides leadership, partnership with key leaders, and guidance on information governance across all business functions.
• Leads cross-functionally to implement and maintain enterprise-wide document management policy, systems, and related procedures that allow the organization to capture, store, retrieve, share, and destroy business information in electronic and physical format.
• Participates and contributes to the development, operations and maintenance of a comprehensive Information Governance Program, including compliance with all legal, regulatory, corporate, financial requirements, and retention and destruction schedules.
• Provides legal expertise regarding information governance laws and regulations across the business.
• Implements and ensures appropriate procedures for the creation, maintenance, archiving and destruction of all company information.
• Collaborates and coordinates with appropriate business functions impacted by legal proceedings and audits.
• Identifies vital records and establishes guidelines to maintain business continuity after a disruption or disaster.
• Sets the tone across the organization on robust record retention practices.

Other Duties As Assigned

Requirements

• Demonstrates ability to create and implement a vision, strategy, and plan for compliance, privacy, and/or information governance across business functions.  Global experience is a plus.
• Collaborates effectively with the Executive Leadership Team to define compliance’s role in supporting the business and ensuring adherence.
• Communicates complex compliance concepts effectively to executive management and others in the organization in a way that is connected to business objectives and our Code of Business Conduct and Ethics.
• Committed to fostering an inclusive and diverse workforce that enables all participants to contribute to their full potential in pursuit of organizational objectives;
• Communicates clearly and consistently to ensure transparency and to effectively function within and across a global and matrixed organization.
• Excels at leading through influence including with senior executives as well as more junior team members.
• Thrives as a leader or a member of cross-functional teams.
• Demonstrates agile and distributed decision-making using data and applying judgment to balance pace, rigor, and risk.
• Committed to delivering high-quality results, overcoming challenges, focusing on what matters, and executing in a dynamic startup environment.
• Displays personal courage while remaining flexible and sensitive to different circumstances to solve problems, coach and learn in each situation, and take decisive action to rectify issues.
• Exemplifies a highly organized and self-directed approach to work, including the ability to handle multiple projects simultaneously and prioritize competing tasks in time-constrained situations.
• Practices impeccable attention to detail.
• Bachelor’s degree and Juris Doctorate with at least 15 years of compliance, privacy, and/or information governance-related experience.
• Licensed to practice law in at least one jurisdiction in the United States.
• Minimum of 10 years of experience in a pharmaceutical company.  Management experience a plus.  Global experience a plus.
• One or more relevant certifications preferred.  These can include Certification of Healthcare Compliance (CHC), Certified Compliance and Ethics Professional (CCEP), Certified in Healthcare Privacy and Security (CHPS), Certified Information Privacy Specialist, RHIA, RHIT, and the like.
• Must be able to travel 5-15% of the time including international travel.

The salary range for this position is $347,650 to 470,350

#LI-LY1