Compliance Data & Privacy Specialist

About the role

Medtronic, a global healthcare technology company, is hiring a Compliance Data & Privacy Specialist in Bogotá, Colombia, on a hybrid basis. The specialist supports Medtronic businesses and functions by giving expert privacy advice, running Privacy Third-Party Risk Assessments (TPRAs) and helping validate and track privacy issues. The role also contributes to Medtronic's AI governance program by assessing AI solutions and promoting responsible AI use.

Key responsibilities

• Carry out timely, high-quality TPRAs, assessing privacy controls and requirements and delivering privacy outputs
• Conduct AI assessments for business use, covering governance, privacy, compliance, security, transparency and accountability
• Evaluate AI use cases, models, tools and third-party AI solutions to identify risks and governance needs
• Partner with Privacy, Legal, Information Security, Compliance, Data Governance and business stakeholders to mitigate AI-related risks
• Assess third-party vendors and document assessment outcomes, risk analyses and recommendations
• Support remediation efforts and track risk mitigation actions through closure
• Assist with Privacy Impact Assessments (PIAs) and other privacy governance activities
• Support continuous improvement of AI governance frameworks and monitor emerging AI technologies and regulations
• Prepare reports, metrics and presentations on AI assessment activities and governance effectiveness

Required profile

• Bachelor's degree required; law degree strongly preferred
• Experience in compliance, privacy, risk management, governance, legal, data protection, technology risk, AI governance or related fields
• Experience conducting risk assessments, compliance reviews, governance evaluations or privacy assessments
• Familiarity with AI governance, AI risk assessment and responsible AI principles
• Knowledge of privacy regulations (e.g. GDPR, HIPAA, CCPA/CPRA, LGPD, PIPEDA, PIPL) and AI governance frameworks preferred
• English at B2 level or above

Required skills

• Experience with GRC platforms such as OneTrust, ServiceNow, Archer or LogicGate preferred
• Analytical, critical thinking and problem-solving skills
• Ability to work with global stakeholders and cross-functional teams

What we offer

• Competitive salary and a flexible benefits package
• Eligibility for the Medtronic Incentive Plan (MIP)