• Oversee the day-to-day operation of Meditec’s U.S. privacy program, including development and maintenance of policies, procedures, training, and privacy governance documentation. • Lead incident investigation and response, including breach assessment, remediation, and notifications to regulatory agencies and other stakeholders as required. • Monitor and interpret international, federal, and state privacy and data protection laws (e.g., GDPR, HIPAA, CCPA/CPRA) and ensure Meditec’s collection, retention, use, and disclosure of data comply with applicable requirements. • Conduct routine audits and assessments of privacy and data protection practices; draft reports of findings and present recommendations for technical and operational improvements. • Lead project management efforts for implementation of new privacy tools, controls, and processes. • Draft, review and negotiate a broad range of privacy, information security, and product security agreements, including Business Associate Agreements (BAAs), Data Transfer Agreements, customer-supplied questionnaires, and cybersecurity documentation. • Serve as a subject matter expert on privacy and data protection, providing guidance to product engineering, IT, security, and business teams. • Act as a liaison with Meditec affiliates and ZEISS Corporate Data Protection Office as the Data Protection Coordinator. • Develop and deliver privacy training and workforce education addressing the handling of PHI, PII, and confidential information to foster a privacy-aware culture. • Manage and oversee U.S. federal and state Aggregate Spend / Open Payments reporting, including data collection, validation, remediation, and submission activities. • Actively monitor and manage external vendors, ensuring accurate data aggregation from multiple source systems. • Evaluate data quality issues and obtain additional information from internal stakeholders or third parties when required. • Perform analysis related to Healthcare Professionals (HCPs), including license verification, CMS validation failures, and residency determinations. • Prepare and review aggregate spend submission reports and determine completeness and accuracy for Meditec entities. • Submit aggregate spend data through the CMS Open Payments Portal and support company officers during attestation. • Investigate and resolve Open Payments disputes in collaboration with internal and external partners in accordance with federal guidelines. • Review, route, approve, and release payment for commercial sponsorship requests, ensuring adherence to company compliance policies. • Monitor and update sponsorship and transparency guidance as regulations and internal policies evolve. • Support compliance-related audits, investigations, and training initiatives as directed by U.S. Compliance Counsel.