Patient Privacy Officer & Counsel
Sanofi
August 22, 2026
Remote friendly (Cambridge, MA)
United States
$161,250 - $232,916.66 USD yearly
Corporate Functions
Main Responsibilities
- Act as a global officer and expert on data privacy; promote and maintain a privacy culture across the patient data lifecycle (patient-centric; “TRT—Thoughtful Risk Taking”).
- Partner as a business owner for R&D and/or Medical departments with end-to-end accountability for privacy activities, including privacy-by-design, monitoring, and reporting risk management strategies to senior R&D leaders.
- Serve as SME on patient data; drive transversal privacy initiatives for responsible use of patient data aligned with patient perspectives, ethical/regulatory standards, and cross-functional stakeholders to protect patient rights and enable innovation.
- Monitor privacy risks within your area.
- Partner with local Privacy Officers and Legal teams to ensure supported Global Patient initiatives comply with local practices and regulations.
- Co-author internal position papers with Legal, R&D, and Government Affairs; represent Sanofi in industry advocacy with trade associations, patient groups, and data protection regulators.
- Oversee patient rights requests from supported areas to ensure compliance with regulatory requirements and Sanofi privacy commitments.
- Drive closure of action plans from regulatory inspections and internal audits.
Qualifications
- JD (or equivalent advanced law degree) and a valid US license to practice law.
- 7+ years professional experience, including significant data privacy experience.
- In-depth knowledge of US state/federal privacy laws (e.g., CCPA, HIPAA) and familiarity with AI regulations/ethical frameworks.
- Preferred: CIPP/US, CIPP/E, CIPM (or equivalent).
- Strong understanding of the R&D journey of a new drug to product registration and safety in a GxP/Good Clinical Practice setting.
- Demonstrated application of privacy principles in R&D; patient programs experience is a plus.
- Crisis leadership, strong accountability, stakeholder alignment, and coordinated resolution.
- Strong communication and stakeholder management with senior leaders.
- Advanced external advocacy with regulators/industry peers.
- Ability to translate regulatory/societal/technological changes into proactive patient privacy risk mitigations and opportunity strategies.
Benefits
- High-quality healthcare, prevention and wellness programs, and at least 14 weeks’ gender-neutral parental leave.
- Act as a global officer and expert on data privacy; promote and maintain a privacy culture across the patient data lifecycle (patient-centric; “TRT—Thoughtful Risk Taking”).
- Partner as a business owner for R&D and/or Medical departments with end-to-end accountability for privacy activities, including privacy-by-design, monitoring, and reporting risk management strategies to senior R&D leaders.
- Serve as SME on patient data; drive transversal privacy initiatives for responsible use of patient data aligned with patient perspectives, ethical/regulatory standards, and cross-functional stakeholders to protect patient rights and enable innovation.
- Monitor privacy risks within your area.
- Partner with local Privacy Officers and Legal teams to ensure supported Global Patient initiatives comply with local practices and regulations.
- Co-author internal position papers with Legal, R&D, and Government Affairs; represent Sanofi in industry advocacy with trade associations, patient groups, and data protection regulators.
- Oversee patient rights requests from supported areas to ensure compliance with regulatory requirements and Sanofi privacy commitments.
- Drive closure of action plans from regulatory inspections and internal audits.
Qualifications
- JD (or equivalent advanced law degree) and a valid US license to practice law.
- 7+ years professional experience, including significant data privacy experience.
- In-depth knowledge of US state/federal privacy laws (e.g., CCPA, HIPAA) and familiarity with AI regulations/ethical frameworks.
- Preferred: CIPP/US, CIPP/E, CIPM (or equivalent).
- Strong understanding of the R&D journey of a new drug to product registration and safety in a GxP/Good Clinical Practice setting.
- Demonstrated application of privacy principles in R&D; patient programs experience is a plus.
- Crisis leadership, strong accountability, stakeholder alignment, and coordinated resolution.
- Strong communication and stakeholder management with senior leaders.
- Advanced external advocacy with regulators/industry peers.
- Ability to translate regulatory/societal/technological changes into proactive patient privacy risk mitigations and opportunity strategies.
Benefits
- High-quality healthcare, prevention and wellness programs, and at least 14 weeks’ gender-neutral parental leave.