Data Privacy and AI Manager

Give hope. Give health. Make your mark in the fight against cancer. At Accuray, we make a direct and powerful impact on the lives of cancer patients every day — helping them live longer, better lives. But our commitment to innovation offers a truly unique opportunity: the chance to change the fight against cancer — helping to develop, introduce and support new treatment delivery systems and software that will give new hope and new health to cancer patients and cancer survivors around the world.

Accuray develops, manufactures and sells radiotherapy systems for alternative cancer treatments. Our radiation therapy for cancer makes treatment shorter, safer, personalized and more effective, ultimately enabling patients to live longer, better lives.

Job Description

POSITION TITLE:

Data Privacy and Responsible AI Manager DEPARTMENT:
Accuray Global Legal Department

LOCATION:

Madison, WI (Hybrid) or Remote (U.S.)

Give hope. Give health. Make your mark in the fight against cancer. At Accuray, we make a direct and powerful impact on the lives of cancer patients every day — helping them live longer, better lives. But our commitment to innovation offers a truly unique opportunity: the chance to change the fight against cancer — helping to develop, introduce and support new treatment delivery systems and software that will give new hope and new health to cancer patients and cancer survivors around the world.

Accuray develops, manufactures and sells radiotherapy systems for alternative cancer treatments. Our radiation therapy for cancer makes treatment shorter, safer, personalized and more effective, ultimately enabling patients to live longer, better lives.

The Data Privacy and Responsible AI Manager is a senior individual contributor responsible for assessing, advising on, and mitigating privacy risks across enterprise operations and third-party relationships. The role will also support our responsible AI governance program. The role partners with Legal, Security, IT, and business stakeholders to support compliance, risk management, and responsible use of data and AI technologies. The primary focus is on enterprise systems, cloud services, SaaS platforms, vendor relationships, data sharing arrangements, and AI-enabled technologies.

Reports to the , Accuray Global Legal Department with dotted line to the Chief Legal Officer.

• Privacy Risk Assessment & Business Advisory Identify and assess privacy risks across enterprise processes, systems, vendors, and business initiatives. Provide practical, risk-based guidance regarding data collection, use, sharing, retention, and international transfers. Evaluate risks related to data collection, internal use, external sharing, retention, and international transfers, particularly in cloud-based and third-party environments. Recommend and document appropriate mitigations aligned with privacy, security, and enterprise risk management requirements.
• Privacy Impact Assessments (PIAs) & DPIAs Conduct PIAs and DPIAs for new or materially changed processing activities, systems, applications, and third-party services. Document processing activities, assess privacy risks, and recommend appropriate controls and safeguards. Coordinate assessment with Security and other stakeholders and integrate reviews into relevant business processes.
• Data Processing Agreements & Contractual Privacy Review Review DPAs, BAAs, and privacy-related contract terms for vendors, customers, and partners. Assess privacy risks associated with data use, sharing, retention, cross-border transfers, and third-party processing. Provide risk-based recommendations regarding contractual protections, controls, and compliance obligations.
• Collaboration with Enterprise Security & Incident Response Partner with Enterprise Security on privacy and security risk assessments, vendor reviews, and third-party risk management activities. Support privacy-related incident assessments, investigations, and documentation in coordination with Security and Legal.
• Global Privacy Regulatory Application Apply global privacy and data protection requirements, including HIPAA, GDPR, UK GDPR, and other applicable laws. Support compliance reviews, cross-border data transfer assessments, and related documentation.
• Responsible AI Governance Support the implementation and day-to-day operation of Accuray's responsible AI program. Conduct AI risk and impact assessments for AI-enabled tools, services, vendors, and proposed use cases. Partner with Legal, Security, GIS, Product, and business stakeholders to identify, assess, and mitigate AI-related risks. Support evaluation of third-party AI vendors, contractual provisions, and governance controls. Monitor emerging AI laws, regulations, and industry standards, and contribute to AI governance policies, guidance, training, and documentation.
• Travel Some travel (