Privacy Manager Canada

**Job Description Summary**:
We are** the makers of possible**

BD is one of the largest global medical technology companies in the world. Advancing the world of health is our Purpose, and it’s no small feat. It takes the imagination and passion of all of us—from design and engineering to the manufacturing and marketing of our billions of MedTech products per year—to look at the impossible and find transformative solutions that turn dreams into possibilities.

We believe that the human element, across our global teams, is what allows us to continually evolve. Join us and discover an environment in which you’ll be supported to learn, grow and become your best self. Become a **maker of possible** with us.

**Position Summary**:
The Privacy Manager is a member of the Privacy Office and serves as a point of contact for internal stakeholders, specifically the Canadian businesses and functions on privacy related matters, reporting - as appropriate - to a member of the BD Global Privacy Leadership Team.

This role is responsible for assisting the North America region, specifically the Canadian businesses and functions in:

- addressing, as the Privacy Office first line of defense, all Privacy and Data Protection related issues in their territory and, as appropriate, seeking guidance from or escalating issues to the BD Global Privacy LT
- ensuring appropriate implementation and delivery of the BD Privacy and Data Protection Strategy and Program at the local level, in conformity with all applicable local data protection laws and regulations as well as adjacent laws impacting privacy
- supporting the BD Privacy and Data Protection Governance and Operating Model, working with the Privacy Analysts, coordinating the local network of Privacy Champions and interacting with local DPOs (if any)
- delivering in their territories with respect to all scope areas of the BD Privacy and Data Protection Program, with particular reference to Training & Awareness, Data Lifecycle Management, Incident Management and Individual Rights Processing, Third Party Management and Monitoring & Remediation

**Key Responsibilities**
- _ Privacy Counselling_: serve as a point of contact for internal stakeholders in the various BD clusters/countries and for local businesses and functions, and provide them with expert advice on privacy matters, with direction from the BD Global Privacy LT
- _ Project Management_: implement appropriate processes and controls to address privacy gaps and mitigate privacy risks, provide project management leadership and support for privacy-related projects, working closely with appropriate functions and businesses
- _ Data Lifecycle Management_: in collaboration with the BD Global Privacy LT, support maintenance of local BD inventories of processing activities, IT platforms and products, assist the business in performing privacy impact assessments, review and approve all assessments and, where appropriate, remediate identified risks
- _ Written Standards_: under the direction of the BD Global Privacy LT, effectively implement all applicable privacy written standards and detect opportunities for developing granular documents to provide guidance to the business in specific circumstances with a view to achieving their objectives, while complying with privacy laws and policies
- _ Training & Awareness_: in accordance with the BD Privacy and Data Protection Strategy, oversee, direct, deliver, or ensure delivery of effective privacy training and guidance to all relevant BD associates, contractors and third parties, with respect to BD privacy written standards
- _ Third Party Management_: support the privacy third party assessment process and, where applicable, the transfer impact assessment process, and ensure appropriate use of privacy contract templates
- _ Monitoring and Remediation_: support the delivery and implementation of plans for privacy compliance, auditing, and monitoring activities to assess the effectiveness and efficiency of the BD Privacy and Data Protection Program, in coordination with the BD Global Privacy LT and other local BD compliance and operational assessment functions
- Stay abreast of national and global privacy developments, privacy enhancing technologies, and emerging technologies and privacy impacts.

**Education and experience requirements**:

- Bachelor's Degree (Undergraduate or professional degree in related specialty preferred)
- At least three years of experience in a healthcare privacy compliance role, or equivalent experience with strong focus on PIPEDA, PHIPA, Law 25, and other provincial privacy regulations
- IAPP certification(s): CIPP, CIPM, CIPT strongly preferred
- OneTrust certification strongly preferred
- Demonstrated organization, leadership and management skills
- Conducts business with a professional, collaborative approach that is proactive, solution oriented and forward thinking
- Exceptional communication, critical thinking skills, attention to detail, and resource