Privacy Analyst, Global Privacy Team

Diversity - Innovation - Caring - Global Collaboration - Winning Spirit
- High Performance

At Boston Scientific, we’ll give you the opportunity to harness all that’s within you by working in teams of diverse and high‑performing employees, tackling some of the most important health industry challenges. With access to the latest tools, information and training, we’ll help you in advancing your skills and career. Here, you’ll be supported in progressing – whatever your ambitions.

Boston Scientific is looking for a United States‑based Privacy Analyst to join the legal department as a key contributor to its growing, world‑class Global Privacy Team. This role provides you with the opportunity to support the privacy operations of an innovative medical device leader on a broad portfolio of diverse privacy and data protection topics. Your day will include a variety of matters that will require you to analyze, investigate and document data protection matters as well as develop and maintain program materials to ensure that company personnel are aware of, and in compliance with, applicable laws and regulations.

At Boston Scientific, we value collaboration and synergy. This role follows a hybrid work model requiring employees to be in our local office at least three days per week. Boston Scientific will not offer sponsorship or take over sponsorship of an employment visa for this position at this time. Relocation assistance is not available for this position at this time.

• Conduct and document privacy impact assessments, data protection impact assessments, AI risk assessments, and similar activities for systems, products, clinical and commercial initiatives; provide guidance on controls and compliance solutions.
• Maintain and improve records of processing, data maps, and data inventories; support data minimization and purpose‑limitation standards.
• Triage and help fulfill data subject rights requests.
• Assist in developing and implementing policies, procedures, reference materials, metrics/KPIs, trainings, and process improvements related to data protection.
• Utilize technologies for business process workflows, such as the One Trust privacy operations platform, Office 365, and enterprise reporting tools.
• Support audits, certifications, and internal control testing related to privacy program requirements.
• Collaborate and coordinate with colleagues across all business units, Digital, IT and Cybersecurity, Global Quality, Global Compliance, Global Security, Clinical Research, R&D, and Human Resources to provide direction and guidance on company‑wide data protection and AI projects.
• Foster company compliance with global privacy, data protection and AI laws and regulations as well as industry best practices and standards.

• A minimum of 2+ years’ experience related to privacy, data or information governance, legal, compliance and/or artificial intelligence.
• Working knowledge of enterprise AI tools such as ChatGPT, Microsoft Copilot, or other generative AI platforms used in professional environments.
• Strong writing, communication, and project management skills.

• Experience with regulated industries such as medical device, pharma, or health technology.
• Experience or familiarity with one or more of the following:
  • Privacy or compliance operations
  • One Trust Automated Data Mapping or similar privacy operations platforms
  • Windchill or similar quality management platforms
  • Working knowledge of Microsoft SharePoint and Lists
  • Enterprise reporting tools such as Excel, Tableau, or Power
    
    BI.
  • Working at a global/multi‑national organization
• Understanding of global, federal and/or state requirements related to privacy, data protection and/or generative AI, such as HIPAA, U.S. consumer privacy laws and GDPR.
• Certification in one or more of the following:
  • International Association of Privacy Professionals (IAPP) certification: CIPM, CIPP/US, CIPP/EU, etc.
  • Certified in Healthcare Privacy Compliance (CHPC) by the Health Care Compliance Association.
• Knowledge of industry standards affecting privacy and information security, such as NIST and ISO 27001/27002; privacy and/or security…