Global Privacy Officer

Role Summary

Reporting to the Chief Ethics and Compliance Officer, the Global Privacy Officer is a senior member of the Ethics, Compliance, and Privacy department who will advance the company’s strategy and commitment to compliance, ethics, and privacy by developing, implementing, and continuously enhancing a global privacy program aligned with regulatory requirements and industry best practices. The Global Privacy Officer leads a team of privacy professionals and collaborates with Finance, IT, ERM, HR, Legal, and other stakeholders, as well as external advisors, to support the company’s objectives.

Responsibilities

• Leads a team of privacy professionals to support the organization's objectives by developing, implementing, and maintaining a global privacy program aligned with regulatory requirements and industry best practices.
• Serves as a key point of contact for privacy authorities in the US, UK, and EU as necessary.
• Identifies privacy risk and designs effective mitigation strategies.
• Oversees data protection impact assessments (DPIAs), privacy risk assessments, and third-party vendor evaluations to manage privacy risk.
• Collaborates with the Senior Compliance Officer to collect and analyze data to detect emerging risk areas, deficient controls, or non-compliance; prepares reports for key stakeholders.
• Drafts global privacy policies, designs and delivers training programs for employees, contractors, and partners, and leads investigations and responses to data breaches and privacy incidents, including regulatory reporting and remediation as needed.
• Promotes a privacy-first culture through ongoing education and engagement.
• Manages processes for handling data subject access requests (DSARs), consent management, and individual rights under GDPR and other laws.
• Leads cross-functional efforts to ensure compliance across R&D, clinical trials, marketing, HR, and digital platforms.
• Coordinated with the Ethics, Compliance, and Privacy lead team to advance department goals and drive consistency in compliance and ethics.
• Keeps informed on new laws, regulations, and industry trends and reflects developments in the global privacy program.
• Assists colleagues with projects outside primary responsibilities to achieve corporate objectives and maintain a collegial atmosphere.

Qualifications

• 10–12 years of relevant pharmaceutical privacy experience in-house, with specific expertise in managing a global privacy program for a multinational organization.
• Law degree preferred, but not required.
• Deep understanding of global privacy regulations and their practical application.
• Experience managing privacy incidents and/or data breaches.
• Solid judgment and business acumen with understanding of multinational pharmaceutical operations.
• Strong knowledge of privacy laws and regulations in the pharmaceutical/healthcare industry US and internationally, including patient and employee data.
• Experience working across functions and geographies with a customer service orientation and responsiveness.
• Excellent oral and written communication; motivated, efficient, and collaborative.
• Ability to work accurately with urgency in a fast-paced environment; strong interpersonal skills and adaptability across cultures.
• Effective management skills to drive a positive, creative, and collaborative team environment.
• Travel required.