Associate Compliance Privacy Director

Exelixis • Alameda, CA

1d • $219,000 - $278,000 • Onsite

About The Position

The Associate Compliance Privacy Director will support and advance Exelixis' privacy compliance program as a privacy subject matter expert and point of contact. The role partners with cross-functional teams to ensure enterprise-wide compliance with U.S. and global privacy and data security requirements, including GDPR, clinical trial regulations, and HIPAA obligations for the employee group health plan. It supports policy and SOP development, training, assessments, audits, monitoring, and coordination with Legal Affairs to translate evolving requirements into scalable, practical solutions that promote privacy and data security by design.

The position has no supervisory responsibilities. It is based in Alameda, California, requires up to 20% travel, and operates in a modern collaborative office with equipment including dual monitors and ergonomic chairs.

Requirements

• Bachelor’s degree in a related discipline and 11 years of relevant experience, or an equivalent combination of education and years of experience.
• At least 11 years of professional experience, including 9 years in privacy or data protection in the life sciences, biotech, pharma, or medical device industry, focused on program operations and governance, risk, and compliance activities.
• At least 2 years of project management experience in a matrixed organization.
• Experience advising on privacy matters related to health information processing and familiarity with patient consent management, call center operations, and digital outreach.
• Experience working across a matrixed corporate environment.
• Excellent interpersonal communication, collaboration, project management, and stakeholder management skills, including the ability to influence and collaborate at all organizational levels.
• Ability to develop and deliver clear, concise presentations.
• Strategic thinking with a proactive, risk-based approach.
• Sound ethical judgment and consistent adherence to data protection principles.
• Ability to devise creative business solutions for complex problems and implement organizational or team objectives.
• Ability to manage ambiguity, handle multiple tasks simultaneously, and adjust priorities quickly.
• Highly organized, detail-oriented, and analytically rigorous, with effective multitasking and prioritization skills.
• Self-starter and quick learner.
• Strong computer skills, including Microsoft Office Suite, document comparison programs, and Internet tools.

Nice To Haves

• CIPP/US, CIPP/E, CIPM, or similar certification.
• Experience with AI and data governance.
• Experience with HIPAA compliance in an employee benefits context.
• Experience with privacy or knowledge management platforms and tools such as OneTrust, SNOW, or Confluence.
• Experience with privacy matters in the digital and advertising technology ecosystem in the biopharmaceutical industry.
• Strong understanding of global privacy frameworks and regulatory trends.
• Proven ability to operationalize legal requirements into practical business solutions.
• Familiarity with privacy considerations in vendor management, data transfers, and research protocols.
• Demonstrated success implementing privacy compliance measures in a matrixed organization.

Responsibilities

• Provide strategic and operational privacy support across the company, including serving as a designated Compliance representative on the Information Governance Council and supporting privacy controls in relevant business processes such as incident response, information and data governance, and data security.
• Understand how data is used across products, teams, and research; document and implement privacy requirements for new products and initiatives.
• Develop, document, and maintain privacy operations processes and procedures, and help develop and maintain privacy training and awareness programs.
• Conduct internal investigations of privacy matters in collaboration with and at the direction of Legal Affairs, including supporting corrective actions.
• Monitor and assess the impact of evolving U.S. federal and state privacy and data security laws, regulatory guidance, and enforcement trends on business operations and the privacy compliance program.
• Develop privacy compliance program KPI and metrics reporting for senior leadership to support visibility, alignment, and continuous improvement.
• Partner with global clinical trial operations to implement data protection requirements, including data transfer mechanisms, personal data notices, consent language, and data processing controls.
• Provide guidance, in collaboration with Legal Affairs, on HIPAA compliance requirements for the company’s group health plan and coordinate with HR and benefits administrators.
• Conduct and manage privacy and data impact assessments as needed.
• Support cross-border data transfer compliance, including documenting transfer impact assessments and requirements under SCCs, UK IDTA, and other mechanisms.
• Manage data subject rights requests, coordinate data review and responses across functions, and maintain compliance documentation.
• Collaborate with Legal Affairs and IT on incident response and breach notification processes.
• Align with Legal Affairs on preferred privacy- and data security-related contract terms and provisions; partner with IT to operationalize data protection requirements in business processes, policies, and administrative and technical controls.
• Analyze privacy impacts of initiatives involving AI, biometrics, and emerging technologies, and recommend appropriate controls.
• Manage data processing activities and respond to data subject and regulator inquiries; incorporate Privacy by Design principles into work products, processes, and decision-making.
• Define, scope, and execute technical frameworks for website tracking privacy, aligning marketing technologies with global privacy regulations through consent management architecture, tag governance, and compliance auditing.
• Build collaborative relationships with stakeholders across the organization to align on business initiatives and project outcomes.
• Participate in working groups, governance committees, and cross-functional initiatives with privacy and data security impacts.
• Perform other duties as assigned and comply with all policies and standards.

Benefits

• 401(k) plan with generous company contributions
• Group medical coverage
• Dental coverage
• Vision coverage
• Life insurance
• Disability insurance
• Flexible spending accounts
• Discretionary annual bonus program, or a sales-based incentive plan for field sales staff
• Opportunity to purchase company stock
• Long-term incentives
• 15 accrued vacation days in the first year
• 17 paid holidays, including a company-wide winter shutdown in December
• Up to 10 sick days throughout the calendar year

What This Job Offers

• Job Type: Full-time
• Career Level: Director