Director, Privacy & Data Protection, Americas
Johnson & Johnson
13 hours ago
Remote friendly (New Brunswick, NJ)
United States
Corporate Functions
We are searching for the best talent for Director, Privacy & Data Protection, Americas.
Key Responsibilities
- Serve as senior regional privacy executive for MedTech across the Americas: strategic leadership, direction-setting, and regulatory oversight.
- Translate global MedTech privacy strategy into an Americas execution plan aligned with business priorities and legal requirements.
- Oversee day-to-day privacy operations (governance, risk management, escalations, regulatory engagement).
- Promote ethical, responsible, and innovative data use across Commercial, Clinical, R&D, Robotics/Digital, and connected-device programs.
- Lead and develop regional/sub-regional privacy leaders; manage one direct report (Senior Manager, LATAM).
- Oversee a network (~130) of named Privacy Stewards; support PFDS deployment; monitor self-assessments; define steward responsibilities; act as primary escalation point.
- Provide privacy-by-design guidance across product development, clinical research, digital platforms, connected devices/IoT, imaging, and analytics.
- Approve Privacy Assessments (e.g., XIA) for medium/high-risk data processing; oversee DPIAs, Legitimate Interest Assessments, incident response, and remediation.
- Ensure compliance with GDPR, UK GDPR, national privacy laws, AI regulations, and digital-health frameworks; support audits, consultations, and M&A activities.
Qualifications & Experience
- Bachelor’s degree required.
Technical Expertise
- Strong expertise in GDPR, UK GDPR, and major Americas data protection laws.
- Deep MedTech knowledge (clinical data, product lifecycle data, device telemetry, robotics/digital surgery platforms, connected devices).
- Experience with privacy-by-design, data governance, AI/ML governance, and cross-border data mechanisms.
Leadership / People Leadership / Stakeholder Management
- Lead complex privacy programs across multinational matrixed organizations.
- Demonstrated success leading large distributed teams and steward networks; strong coaching/mentoring.
- Exceptional communication and ability to translate regulatory requirements into actionable guidance.
Benefits (time off)
- Vacation: 120 hours/year; Sick time: 40 hours/year (CO: 48; WA: 56); Holiday pay incl. Floating Holidays: 13 days/year; Work/Personal/Family Time up to 40 hours/year.
- Parental Leave: 480 hours; Bereavement Leave: 240 hours (immediate) and 40 hours (extended); Caregiver Leave: 80 hours; Volunteer Leave: 32 hours; Military Spouse Time-Off: 80 hours.
Application Instructions
- Apply via the posted requisition(s); applications are considered a single submission across country postings.
Key Responsibilities
- Serve as senior regional privacy executive for MedTech across the Americas: strategic leadership, direction-setting, and regulatory oversight.
- Translate global MedTech privacy strategy into an Americas execution plan aligned with business priorities and legal requirements.
- Oversee day-to-day privacy operations (governance, risk management, escalations, regulatory engagement).
- Promote ethical, responsible, and innovative data use across Commercial, Clinical, R&D, Robotics/Digital, and connected-device programs.
- Lead and develop regional/sub-regional privacy leaders; manage one direct report (Senior Manager, LATAM).
- Oversee a network (~130) of named Privacy Stewards; support PFDS deployment; monitor self-assessments; define steward responsibilities; act as primary escalation point.
- Provide privacy-by-design guidance across product development, clinical research, digital platforms, connected devices/IoT, imaging, and analytics.
- Approve Privacy Assessments (e.g., XIA) for medium/high-risk data processing; oversee DPIAs, Legitimate Interest Assessments, incident response, and remediation.
- Ensure compliance with GDPR, UK GDPR, national privacy laws, AI regulations, and digital-health frameworks; support audits, consultations, and M&A activities.
Qualifications & Experience
- Bachelor’s degree required.
Technical Expertise
- Strong expertise in GDPR, UK GDPR, and major Americas data protection laws.
- Deep MedTech knowledge (clinical data, product lifecycle data, device telemetry, robotics/digital surgery platforms, connected devices).
- Experience with privacy-by-design, data governance, AI/ML governance, and cross-border data mechanisms.
Leadership / People Leadership / Stakeholder Management
- Lead complex privacy programs across multinational matrixed organizations.
- Demonstrated success leading large distributed teams and steward networks; strong coaching/mentoring.
- Exceptional communication and ability to translate regulatory requirements into actionable guidance.
Benefits (time off)
- Vacation: 120 hours/year; Sick time: 40 hours/year (CO: 48; WA: 56); Holiday pay incl. Floating Holidays: 13 days/year; Work/Personal/Family Time up to 40 hours/year.
- Parental Leave: 480 hours; Bereavement Leave: 240 hours (immediate) and 40 hours (extended); Caregiver Leave: 80 hours; Volunteer Leave: 32 hours; Military Spouse Time-Off: 80 hours.
Application Instructions
- Apply via the posted requisition(s); applications are considered a single submission across country postings.