Senior Data Platform Compliance Manager

Job Description Summary

We are seeking a Compliance Engineer to join our Digital Transformation, Data Platforms team. This role will focus on ensuring compliance, security and governance standards across our data bricks environment and integrated platforms and tools. The compliance engineer will work closely with the Platform leads, Data Governance, Compliance Analyst and Data Engineering teams to ensure operations meet enterprise, regulatory and industry standards.

The individual will play a key role in ensuring ITGC auditing access controls, monitoring compliance policies, automating Compliance checks and ensuring alignment with frameworks such as SOX, GXP, GDPR, HIPAA and internal data governance standards.

We are the makers of possible

BD is one of the largest global medical technology companies in the world. Advancing the world of health™ is our Purpose, and it’s no small feat. It takes the imagination and passion of all of us—from design and engineering to the manufacturing and marketing of our billions of Med Tech products per year—to look at the impossible and find transformative solutions that turn dreams into possibilities.

We believe that the human element, across our global teams, is what allows us to continually evolve. Join us and discover an environment in which you’ll be supported to learn, grow and become your best self. Become a maker of possible with us.

Senior Data Platform Compliance Manager

Job Summary
The Senior Data Platform Compliance Manager will be responsible for leading and accomplishing compliance initiatives across BD's global data platforms, ensuring alignment to data privacy regulations (e.g., GDPR, CCPA, HIPAA), internal policies, and industry standards. This role will play a critical part in maintaining the integrity, security, and ethical use of data throughout its lifecycle within BD's extensive data ecosystem.

Job Responsibilities

• Develop, implement, and maintain comprehensive data platform compliance strategies, policies, and procedures in alignment with global data privacy regulations (GDPR, CCPA, HIPAA, etc.) and other relevant legal frameworks.
• Conduct regular compliance assessments and audits of data platforms, data pipelines, and data processing activities to identify potential risks, vulnerabilities, and areas for improvement.
• Collaborate closely with legal, IT, information security, and business units to integrate privacy-by-design and security-by-design principles into the development and evolution of data platforms.
• Oversee the implementation and monitoring of data access controls, data retention policies, data anonymization/pseudonymization techniques, and data security measures across various data storage and processing environments.
• Lead the response to data privacy inquiries, data subject access requests (DSARs), and potential data breaches, working multi-functionally to ensure timely and compliant resolution.
• Provide expert guidance and training to data platform teams, developers, and data owners on data privacy regulations, compliance requirements, and guidelines.
• Stay abreast of evolving data privacy laws, industry standards, and technological advancements to proactively adapt and strengthen BD's data platform compliance posture.
• Manage and track compliance metrics, generate reports for leadership, and present findings and recommendations to relevant customers.
• Participate in vendor assessments and contract reviews to ensure third-party data processors meet BD's compliance standards.
• Contribute to the development and maintenance of data governance frameworks related to data platforms.

Job Qualifications

• Bachelor's degree in Information Technology, Computer Science, Law, Business Administration, or a related field. Master's degree or relevant certifications (e.g., CIPP/E, CIPP/US, CISM, CISSP) preferred.
• Minimum of 8-10 years of experience in data privacy, compliance, information security, or a related field, with at least 3-5 years specifically focused on data platform compliance or data governance.
• In-depth knowledge of global data privacy regulations, including but not limited to GDPR, CCPA, HIPAA, and other relevant regional data…