Varex Imaging Corporation
Website:
vareximaging.com
Job details:
Varex Imaging, headquartered in Salt Lake City, USA, is a leading innovator, developer, and manufacturer of X-ray imaging component solutions, which includes X-ray tubes, digital flat panel detectors, software, and other key components of X-ray imaging systems. With a 75+ year history of successful innovation, you will find our components in numerous medical, industrial, and security imaging applications worldwide.
We are looking for a Data Privacy Counsel who will play a critical role in providing legal support on data privacy compliance, regulatory matters, and some contract matters within our global organization. This legal position involves ensuring compliance with global data privacy regulations, providing legal guidance on local regulatory and commercial matters, close collaboration with our Global Data Privacy Officer, and fostering a culture of data protection and integrity.
Your role...
The primary purpose of this position is to support the Global Data Privacy Officer (GDPO) in building and strengthening the global data privacy program while providing legal support on local regulatory matters. This role involves collaborating with various departments to ensure that Varex Imaging’s data handling practices are in compliance with applicable data privacy laws and regulations, thereby safeguarding the privacy and security of personal and sensitive information across all operations. As a minor duty the role includes the handling of local governmental matters and procedures, labour issues and providing legal counsel on commercial agreements and local legal requirements.
Main Duties and Responsibilities:
- Review, negotiate, and draft data processing agreements (DPAs), data transfer agreements (including Standard Contractual Clauses and Transfer Impact Assessments), vendor data privacy terms, and commercial contracts with data privacy implications to ensure legal compliance and risk mitigation
- Provide legal advice and strategic guidance on compliance with global and regional data privacy regulations, including GDPR, DPDPA (India), CCPA/CPRA, HIPAA, and emerging AI-specific regulations, ensuring organizational alignment with evolving legal requirements
- Advise business stakeholders, product teams, and functional departments on the legal implications and compliance requirements for data collection, processing, sharing, retention, and subject rights management activities
- Conduct comprehensive legal risk assessments and Data Protection Impact Assessments (DPIAs) for data processing activities, new technologies, AI systems, cross-border data transfers, and high-risk processing operations to identify and mitigate privacy risks
- Monitor, analyse, and interpret changes in data privacy laws and regulatory guidance across multiple jurisdictions, assess business impact, and provide actionable recommendations to leadership and cross-functional teams
- Provide legal guidance on data breach response, including notification obligations under applicable laws, regulatory reporting requirements, and coordination with the incident response team to ensure timely and compliant breach management
- Coordinate with external legal counsel on complex regulatory inquiries, enforcement actions, supervisory authority communications, and cross-border legal matters requiring specialized expertise
- Draft, review, and maintain privacy policies, privacy notices, cookie policies, data subject rights procedures, and other privacy-related legal documentation to ensure accuracy, completeness, and regulatory compliance
Minor Duties:
- Coordinate and handle routine governmental filings, regulatory registrations, and administrative matters as needed
- Provide initial legal guidance on employment-related matters and coordinate with HR and external employment counsel on local labour law compliance issues
- Review standard commercial contracts for general legal terms, escalating complex commercial matters to appropriate legal resources
Your profile...
- Bachelor’s degree in Law; additional certification in data privacy (CIPP/E, CIPP/A, CIPM, or equivalent) beneficial
- Minimum of 3 years of legal experience with demonstrated expertise in data privacy law
- Understanding and compliance with data protection regulations such as GDPR (General Data Protection Regulation), DPDPA (Data Protection and Privacy Act), CCPA/CPRA (California Consumer Privacy Act/California Privacy Rights Act), and other relevant data privacy laws.
- Knowledge in AI Risk Governance, Data Protection Impact Assessment, and Data Subjects Rights Management.
- Experience with Data Processing Agreement review, Risk Assessment and Management, Compliance Management, and Third Party Risk Assessment.
- Experience in a global company preferred
- Strong written and oral communication as well as negotiation skills.
- Attention to detail and ability to work independently.
- Knowledge of data privacy frameworks, compliance processes, and tools
- Excellent communication and interpersonal skills.
- Collaborative team player with a positive demeanour
Click on Apply to know more.
