Senior Manager, Privacy

Saluda Medical•Hopkins, MN

About The Position

Saluda Medical is a commercial-stage medical device company focused on developing treatments for chronic neurological conditions using its novel closed‑loop neuromodulation platform. The company’s proprietary technology senses and measures neural responses to stimulation and automatically adjusts therapy based on real‑time neurophysiological feedback. Saluda Medical’s first product, the Evoke® System, is designed to deliver known, consistent, and personalized spinal cord stimulation therapy by objectively measuring neural responses and maintaining therapy within a prescribed therapeutic window. Saluda Medical is headquartered in Minneapolis, Minnesota. At Saluda, we challenge boundaries. We innovate and think beyond the conventional. Our focus is to revolutionize the standard of care in neuromodulation to positively impact patient’s lives. Reporting in to the Deputy General Counsel, the Senior Manager, Privacy serves as the enterprise leader responsible for developing, implementing, and overseeing the company’s privacy and data protection strategy. This role ensures that the organization’s handling of personal data across all regions and business functions complies with applicable laws, regulations, and ethical standards. The Senior Manager, Privacy will act as a strategic advisor to the legal department and executive leadership, driving a culture of privacy by design and ensuring that privacy practices align with corporate values, innovation goals, and global regulatory expectations. The Senior Manager, Privacy will also provide the legal team with assistance on other matters.

Requirements

Experience supporting commercial teams and supporting them to meet privacy objectives by advising on privacy requirements.
Familiarity with HIPAA, GDPR, and U.S. state privacy laws
Experience working with clinical management initiatives and reviewing Informed Consent requirements and regulatory submissions.
Experience supporting Patient Support Programs.
5+ years of relevant experience in a corporate medical device environment
Comfortable in a face-paced and demanding environment
Capable of developing and maintaining effective, professional, and collaborative relationships across Saluda
Demonstrated ability to work independently and proactively, anticipating needs and building strategic programs to increase efficiencies in the organization
High ethical standards and integrity; ability and maturity to maintain confidential information

Nice To Haves

Strong leadership and influencing skills across cultures and business functions.
Excellent judgment and ability to translate privacy concepts into actionable business strategies.
Exceptional communication, presentation, and stakeholder engagement skills.
Excellent written and verbal communications skills
Self-confidence with the courage of his/her convictions
Self-motivated, independent self-starter
Business-minded problem solver
Willingness to take on matters outside of current expertise

Responsibilities

Develop, maintain, and lead the company’s privacy and data protection strategy, ensuring alignment with corporate risk management and compliance frameworks.
Serve as the principal advisor to legal, senior management, and the Board on privacy risks, trends, and regulatory developments.
Foster cross-functional collaboration on privacy matters.
Design, implement, and continuously enhance the privacy compliance program, including policies, procedures, training, and governance mechanisms to promote compliance with state, federal and international privacy laws.
Oversee data privacy impact assessments (DPIAs), records of processing activities, and other regulatory documentation.
Monitor global and US federal and state privacy laws and regulations (e.g., GDPR, HIPAA, CCPA and other state regulations, etc.) and advise on implications for the company’s operations.
Manage relationships with data protection authorities (as appropriate) and coordinate responses to privacy-related inquiries, audits, and investigations.
Develop and conduct communication, education, and training initiatives.
Partner with IT, IT security, and legal to ensure alignment between privacy, cybersecurity, and information management programs related to data protection.
Conduct other legal tasks as needed from time to time.