Role Description
The Senior Counsel, Privacy, will be based in India and reporting to the Chief Legal Officer. This role supports the Company's global privacy program, advises colleagues across the business on privacy matters, and works closely with the Legal team on the privacy and security aspects of the Company's contracting activity, including:
-
Data incident management
-
Review of data privacy and security SOPs
-
Negotiation of Data Processing Agreements (DPAs) and Data Use Agreements (DUAs)
Responsibilities include:
-
Serving as a key member of the Company's global privacy team, supporting the development, implementation, and ongoing administration of the Company's global privacy program across the jurisdictions in which the Company operates.
-
Conducting periodic review and assessment of the Company's data privacy and security standard operating procedures (SOPs) and related policies, and recommending and drafting updates to ensure continued alignment with applicable law (e.g., GDPR, India's Digital Personal Data Protection Act, HIPAA, U.S. state privacy laws) and industry best practice.
-
Leading and supporting data incident management and investigations, including intake, triage, root-cause analysis, remediation, and coordination of any required regulatory or contractual notifications, in partnership with Information Security and other stakeholders.
-
Serving as a trusted advisor to colleagues across the Company on day-to-day privacy questions, including data mapping, privacy impact/risk assessments, retention, and cross-border data transfer issues.
-
Advising Legal team colleagues on contractual matters relating to data privacy and security, including review and negotiation of privacy and security terms in vendor, sponsor, and clinical trial-related agreements.
-
Supporting the negotiation, drafting, and review of Data Processing Agreements (DPAs) and Data Use Agreements (DUAs) with sponsors, vendors, sites, and other third parties.
-
Monitoring legal and regulatory developments affecting global data privacy and security, and advising the Chief Legal Officer and business leadership on their impact to Company operations.
-
Assisting in developing and delivering privacy training and awareness materials for employees and relevant stakeholders.
-
Supporting maintenance of the Company's privacy compliance records, including records of processing activities (ROPA), data inventories, and privacy risk registers.
-
Collaborating with Information Security, Compliance, HR, and business unit stakeholders on privacy-by-design and other cross-functional privacy initiatives.
-
Other duties as assigned by the Chief Legal Officer/Chief Privacy Officer.
Qualifications
-
LL.B./J.D. or equivalent law degree; qualified to practice law in India (or another relevant jurisdiction) and in good standing
-
Minimum of 7-10 years of relevant legal experience, with substantial experience in data privacy and security law
-
Experience handling data incident management and investigations
-
Experience negotiating and drafting Data Processing Agreements (DPAs), Data Use Agreements (DUAs), and related privacy and security contract terms
-
Experience advising on privacy matters in a global organization; experience in a contract research organization, life sciences, healthcare, or technology company preferred
Requirements
-
Vision and Strategy: Understands the Company's global privacy program and how it supports the Company's broader business and compliance strategy.
-
Problem Solving: Demonstrates strong problem-solving and analytical skills, combined with sound judgment, in resolving privacy, data incident, and contractual matters.
-
Oversight: Exercises diligent oversight of assigned privacy matters, data incidents, and DPA/DUA negotiations, escalating to the Chief Legal Officer/Chief Privacy Officer as appropriate.
-
Metrics: Tracks and reports relevant metrics (e.g., data incident response times, DPA/DUA turnaround times, SOP review status) to support the effectiveness of the global privacy program.
-
Culture: Exemplifies Company values in all actions and behavior, and helps promote a culture of privacy and data protection awareness across the organization.
-
Credibility and Integrity: Develops credibility with colleagues and business partners as a knowledgeable and responsive privacy resource; demonstrates impeccable integrity.
-
Continuous Improvement/Change Management: Continually assesses the effectiveness of privacy SOPs, templates, and processes, and recommends improvements as needed.
-
Communication: Communicates effectively, and across time zones, with colleagues, the Legal team, and business stakeholders globally.
Benefits
-
If youβre looking for a career where your work advances global health and where scientific excellence meets real-world impact, join us and be part of something bigger.