Apply on Employer Site

10X Health System · 2 days ago

Data Privacy Specialist

Scottsdale, AZ

Full-time

Onsite

Mid Level

3+ years exp

10X Health System is a pioneering company in the health and wellness industry, dedicated to revolutionizing personal health approaches. They are seeking a detail-oriented Data Privacy Specialist to strengthen their privacy program, ensuring compliance with healthcare and data protection standards while collaborating with cross-functional partners.

Health Care

Responsibilities

Support and improve privacy initiatives that keep patient and consumer data protected and handled responsibly across the entire business and new product offerings

Manage OneTrust workflows, including data mapping, cookie banners, and individual data rights requests

Review and maintain data processing agreements (DPAs) and vendor practices to ensure compliance with privacy and security requirements

Help coordinate privacy incident response and related documentation with Legal and IT

Keep policies, records, and documentation current to support ongoing compliance readiness

Conduct privacy risk assessments and document findings clearly

Identify gaps and recommend practical solutions that fit our size and pace of growth

Support internal and external audit preparation, including assisting with SOC 2 certification

Track changes in all US and OUS privacy laws

Support staff training and awareness programs related to privacy compliance

Partner with business owners to ensure all products and offerings incorporate privacy by design

Qualification

Healthcare privacy complianceOneTrust experienceRisk assessmentsPrivacy laws knowledgeData processing agreementsTrainingAwarenessClear communicationCollaborative approach

Required

3-5 years of experience in healthcare privacy compliance and affairs

Bachelor's degree required

Deep understanding of healthcare privacy and compliance frameworks such as HIPAA, CCPA and CPRA, GINA, GDPR, and FTC guidance

Hands-on experience with OneTrust, including data mapping, cookie consent management, data classification and data rights fulfillment

Ability to conduct audits, risk assessments, and vendor reviews

Collaborative approach and ability to work effectively across teams

Clear communicator who can translate complex concepts into practical training and operational processes

Comfortable operating in a fast paced, growing environment with evolving regulatory needs