Job description
The Legal team is responsible for managing the legal affairs of the company, including providing legal counsel across the organization, handling disputes, and creating and enforcing intellectual property.
Position Summary
The Privacy COE is seeking a Program Coordinator, Data Protection to execute high-priority privacy and healthcare compliance workstreams, with emphasis on cybersecurity/privacy breach response and HIPAA program implementation for newly acquired entities.
This delivery-oriented role serves as project manager, coordinator, and execution lead. It is not an advisory legal role; legal and regulatory interpretation questions will be escalated while this position owns workflow execution, tracking, documentation, and follow-through.
Location and Work Hours
This position will be based in the United States because the work and contacts for daily work will be concentrated primarily in the United States, including U.S. cybersecurity breach response and HIPAA program activities, and will mainly support the Head of Privacy, who is located in the East Coast of the United States. Candidates outside the United States will be considered if they can maintain permanent U.S.-based working hours.
Role Objective
Increase capacity and throughput in Resmed’s highest-risk privacy workstreams by managing timelines, dependencies, documentation, and stakeholder coordination, enabling senior privacy leadership to focus on activities with high business value, direct support of important stakeholders, strategic advisory work and complex legal support.
Key Responsibilities
Privacy and Cybersecurity Incident Response
Manage operational workflows for cybersecurity and privacy incidents involving personal information, protected health information, or other regulated data.
Coordinate intake, triage support, evidence collection, stakeholder follow-up, remediation tracking, status reporting, and closure documentation.
Maintain incident trackers, timelines, decision logs, playbooks, templates, checklists, and escalation paths.
Identify delays, missing inputs, bottlenecks, and process gaps that may affect incident response timelines or documentation quality.
Support after event lessons learned and areas of improvement.
HIPAA Program Implementation for Acquisitions
Support HIPAA program buildout for newly acquired entities, including rollout of policies, procedures, templates, training, and related documentation.
Track milestones, dependencies, owners, risks, open items, completion evidence, and readiness activities for audits, assessments, training, and governance.
Coordinate with Legal, Compliance, Security, IT, HR, and business stakeholders to complete onboarding and integration activities.
Project Management and Privacy Operations
Create and maintain project plans, action trackers, dashboards, issue logs, SOPs, and repeatable workflows for assigned privacy initiatives.
Drive workstream meetings, prepare agendas, document decisions and action items, and follow up to closure.
Support reporting on operational metrics, completion rates, aging items, risks, and status summaries.
Recommend process improvements to reduce cycle time, improve handoffs, eliminate duplication, and strengthen documentation.
Required Qualifications
Bachelor’s degree or equivalent.
Organization, documentation, communication, stakeholder coordination, and follow-through skills.
Ability to manage multiple priorities with urgency, accuracy, discretion, and sound judgment.
Proficiency with collaboration, reporting, and productivity tools.
Strong intellectual curiosity, learning agility, and willingness to quickly build fluency in privacy, cybersecurity, HIPAA, and compliance concepts.
Preferred Qualifications
High proficiency using AI tools to improve productivity, automate repeatable workflows, summarize and organize complex information, generate first drafts of project documentation, and identify opportunities to accelerate privacy operations while maintaining appropriate confidentiality, accuracy, and human oversight.
Success Profile
Highly organized, structured, execution-focused, and able to create order from ambiguity.
Persistent and diplomatic in follow-up, with strong ownership and attention to detail.
Comfortable working cross-functionally on sensitive matters involving legal, regulatory, cybersecurity, and reputational risk.
Uses good judgment to act independently where appropriate and escalate when legal interpretation, risk acceptance, or senior leadership decision-making is required.
Measures of Success
Incident response and HIPAA integration workstreams are tracked accurately, completed on time, and supported by clear documentation.
Privacy leadership has reliable dashboards and visibility into high-priority workstreams, bottlenecks, owners, and deadlines.
Repeatable workflows, templates, and playbooks improve speed, consistency, documentation quality, and operational throughput.
Joining us is more than saying “yes” to making the world a healthier place. It’s discovering a career that’s challenging, supportive and inspiring. Where a culture driven by excellence helps you not only meet your goals, but also create new ones. We focus on creating a diverse and inclusive culture, encouraging individual expression in the workplace and thrive on the innovative ideas this generates. If this sounds like the workplace for you, apply now!We commit to respond to every applicant.
Originally posted on Himalayas
Who can apply
Eligible countries: United States. Accepted UTC offsets: UTC-10, UTC-9, UTC-8, UTC-7, UTC-6, UTC-5, UTC+14. Review the full description for employer-specific work authorization, residency and schedule requirements.