Principal Data Protection & Privacy Engineer - Neuroscience

At Medtronic you can begin a life-long career of exploration and innovation, while helping champion healthcare access and equity for all. You’ll lead with purpose, breaking down barriers to innovation in a more connected, compassionate world.

A Day in the Life

Principal Data Protection & Privacy Engineer

We value what makes you unique. Be a part of a company that thinks differently to solve problems, make progress, and deliver meaningful innovations.

The Neuromodulation and Pelvic Health Groups gather support for critical R&D activities through the Neuro Core R&D organization which brings a large set of Medtronic’s Neurosciences therapies and their project teams together in a collaborative operating unit to employ the full breadth of our talent, technologies, products, services, and solutions to address the needs of customers and patients across the globe. Neuromodulation and Pelvic Health operating units offer devices and therapies to treat chronic pain, movement disorders, overactive bladder, non-obstructive urinary retention, and much more!

Be on the frontlines of the emerging area of medical device data protection and privacy as an integral member and technical leader within a team responsible for creating, deploying, and monitoring cybersecurity and privacy solutions for Medtronic’s medical devices and supporting IT infrastructure. Work directly with R&D teams to ensure all relevant data protection and privacy risks are identified and evaluated, and appropriate and well-balanced solutions are implemented. Develop project privacy management deliverables for regulatory bodies to comply with standards / guidance documents, and successfully communicate data protection policies, processes and solutions to customers, regulatory bodies, and other stakeholders.

A Day in the Life

• Develop and manage a Privacy by Design framework integrated with existing product development lifecycles.
• Lead and perform product data privacy activities ranging from incident response to data protection impact assessments to mitigation implementation.
• Develop and perform product privacy consultations, product specific privacy policies and procedures.
• Leads product through Privacy by Design process in conjunction with product R&D teams and develop and recommend specific privacy controls for product/system wide privacy needs, including third party risk management.
• Conducts and participates in product specific Data Privacy investigations and leads appropriate corrective action, remediation and mitigation efforts.
• Participate in the creation and consultation of privacy required contract and consent language and processes.
• Manage privacy related deliverables for regulatory bodies, ensuring compliance with key standards / guidance documents.
• Responds and assists as appropriate with the Privacy & Security customer question response process.
• Consults with and educates regional business and legal partners on product specific privacy.
• Maintains data mapping and other artifacts to address compliance to global regulations including GDPR.
• Enforces privacy awareness and measures compliance through training and consultation.
• Other duties as assigned.

Must Have: Minimum Requirements:

• Bachelors degree in a technically required.
• Minimum of 7 years of relevant experience, or advanced degree with a minimum of 5 years relevant experience.

Nice to Have:

• Privacy and Security incident management experience.
• Cybersecurity/Information Security and/or IT background.
• Experience with Privacy by Design principals and integrating privacy into product development lifecycles.
• Understanding of data protection practices, risk management processes, cybersecurity principles, and incident response methodologies.
• Expertise in Global Privacy laws including HIPAA and GDPR.
• Experience in Healthcare industry or other heavily regulated industry.
• CIPP, CHPC or similar certification, or proven experience and/or formal education in Data Privacy and Compliance.
• J.D. and/or M.B.A.
• Understanding of medical device regulations and standards (e.g., FDA pre and post market guidance on cybersecurity for medical device manufacturers, ISO 13485, ISO 81001-5-1, etc.).
• Experience with contracting and legal interpretation.
• Strong decision-making capabilities, with a proven ability to weigh the relative costs and benefits of potential actions and identify the most appropriate solution.
• High attention to detail in completing tasks with a focus on Good Documentation Practices (GDP).
• An ability to communicate complex and technical information in a creative and engaging way to diverse audiences, orally and in writing.
• Excellent prioritization capabilities, with an aptitude for breaking down work into manageable parts, effectively assessing the priority and time required to complete each activity.
• Demonstrated ability to develop and grow productive, trusting, and open relationships with a wide variety of constituencies.

Physical Job Requirements

The above statements are intended to describe the general nature and level of work being performed by employees assigned to this position, but they are not an exhaustive list of all the required responsibilities and skills of this position.

The physical demands described within the Responsibilities section of this job description are representative of those that must be met by an employee to successfully perform the essential functions of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions. For Office Roles: While performing the duties of this job, the employee is regularly required to be independently mobile. The employee is also required to interact with a computer, and communicate with peers and co-workers. Contact your manager or local HR to understand the Work Conditions and Physical requirements that may be specific to each role.

Benefits & Compensation

Medtronic offers a competitive Salary and flexible Benefits Package. A commitment to our employees lives at the core of our values. We recognize their contributions. They share in the success they help to create. We offer a wide range of benefits, resources, and competitive compensation plans designed to support you at every career and life stage.

Salary ranges for U.S (excl. PR) locations (USD): $145,600.00 - $218,400.00. This position is eligible for a short-term incentive called the Medtronic Incentive Plan (MIP). The base salary range is applicable across the United States, excluding Puerto Rico and specific locations in California. The offered rate complies with federal and local regulations and may vary based on factors such as experience, certification/education, market conditions, and location. Compensation and benefits information pertains solely to candidates hired within the United States (local market compensation and benefits will apply for others).

About Medtronic

We lead global healthcare technology and boldly attack the most challenging health problems facing humanity by searching out and finding solutions. Our Mission — to alleviate pain, restore health, and extend life — unites a global team of 90,000+ passionate people. We are engineers at heart— putting ambitious ideas to work to generate real solutions for real people. From the R&D lab, to the factory floor, to the conference room, every one of us experiments, creates, builds, improves and solves. We have the talent, diverse perspectives, and guts to engineer the extraordinary.

It is the policy of Medtronic to provide equal employment opportunity (EEO) to all persons regardless of age, color, national origin, citizenship status, physical or mental disability, race, religion, creed, gender, sex, sexual orientation, gender identity and/or expression, genetic information, marital status, status with regard to public assistance, veteran status, or any other characteristic protected by federal, state or local law. In addition, Medtronic will provide reasonable accommodations for qualified individuals with disabilities.

At Medtronic, most positions are posted on our career site for 3-7 days.