Companies in this catalog do not charge applicants. Never send money to apply.
Sr. Privacy & GRC Lead Location: India (Remote) Company: VB Spine
Looking for a career where your work truly matters? At VB Spine, you’ll be part of a mission-focused team supporting innovation and better patient outcomes in spine care. As the Sr. Privacy & GRC Lead, you will lead the global Privacy and Governance, Risk & Compliance program, helping ensure the organization operates in alignment with applicable privacy laws, regulatory requirements, internal controls, and industry best practices.
What You’ll Do:
Lead the development, implementation, and continuous improvement of the global Privacy and GRC programs
Develop and maintain privacy policies, standards, procedures, and governance frameworks aligned with GDPR and other applicable global privacy regulations
Lead Privacy Impact Assessments, Data Protection Impact Assessments, Transfer Impact Assessments, and other privacy risk assessments
Maintain Records of Processing Activities and oversee global data mapping activities
Monitor changes in global privacy laws and recommend updates to policies and business practices
Serve as a key advisor to Legal, Security, IT, HR, Procurement, and business leaders on privacy and compliance matters
Lead governance, risk assessment, compliance monitoring, internal control, and enterprise GRC activities
Develop and monitor compliance metrics, KPIs, and key risk indicators
Oversee Data Subject Rights requests including access, deletion, correction, and portability
Lead privacy incident investigations, breach response activities, corrective actions, and applicable regulatory notification processes
Lead third-party privacy and compliance reviews, including vendor risk assessments and Data Processing Agreements
Partner with Legal, Procurement, IT, and Security to support third-party risk management and remediation
Promote Privacy by Design and Privacy by Default principles across new technologies, applications, and business processes
Provide guidance related to secure data handling, retention, disposal, and international data transfers
Present privacy and GRC program updates, risks, and remediation activities to senior leadership
Lead privacy awareness and employee training initiatives
Coach and develop Privacy and GRC team members
Drive continuous improvement across privacy, compliance, governance, and risk processes
What You Bring:
Bachelor’s degree in Information Security, Cybersecurity, Information Technology, Business, Law, Data Privacy, or a related field preferred; equivalent professional experience may be considered
5+ years of experience in privacy, governance, risk management, compliance, cybersecurity, audit, or a related field
Experience implementing GDPR and other international privacy regulations
Hands-on experience with PIAs, DPIAs, TIAs, ROPAs, and privacy risk assessments
Experience supporting compliance audits, regulatory assessments, controls, and remediation activities
Experience with third-party risk management, vendor privacy assessments, and DPAs
Strong understanding of governance, enterprise risk management, internal controls, and compliance frameworks
Ability to lead cross-functional initiatives and influence stakeholders across multiple business functions
Strong analytical, organizational, communication, and problem-solving skills
Ability to work independently, exercise sound judgment, and manage multiple priorities
Experience within medical device, healthcare, life sciences, or another regulated industry is preferred
Experience with GRC platforms and enterprise risk management frameworks is preferred
Certifications such as CIPP/E, CIPM, CISSP, CISM, CRISC, or CISA are preferred
Knowledge of ISO 27701 and global privacy frameworks is a plus
Fluency in English required
Physical & Mental Requirements:
Ability to manage multiple priorities in a fast-paced environment
Strong analytical, critical-thinking, and decision-making skills
Ability to maintain confidentiality and handle sensitive information with discretion
Ability to work independently and collaboratively with global teams
Excellent written and verbal communication skills
Occasional travel to company offices and vendor locations may be required, approximately 15%
Why VB Spine?
We believe in building strong teams and giving people the opportunity to make a meaningful impact. At VB Spine, you’ll help shape a global privacy and compliance program while partnering with teams across the organization to strengthen governance, manage risk, and support responsible business growth.
Compensation:
Compensation for this role is competitive and based on experience, qualifications, skills, and local market conditions. Final compensation will be determined on a case-by-case basis.
Benefits include:
Competitive benefits based on local country requirements
Paid time off and holidays
Ongoing training and professional development opportunities
Opportunity to work with global teams and senior leadership
Opportunity to grow within a fast-paced and evolving organization