Required Legal Counsel, Data Privacy
The Legal Counsel holds end-to-end strategic and operational ownership of our global privacy, data protection and technology legal matters.
The role is responsible for proactively shaping, leading and embedding a global privacy program across all entities and regions, owning cross-functional initiatives (with IBT, HR, Commercial, Medical, Regulatory and Tech Ops) and ensuring lawful, secure and ethical processing of personal data across the partner, patient, employee and HCP data lifecycles. The role partners closely with the Data Security functions to enable business growth, geo-expansion and AI-driven transformation while safeguarding the company.
The role also includes hands-on legal management of the company's technology procurement agreements with enterprise platform vendors (including SaaS, AI tools, and cybersecurity), from drafting and negotiation through ongoing contract lifecycle management, while also providing legal advice to the companys departments on various legal issues.
(*Please note, the internal title for this role is Legal Counsel)
Responsibilities
Global Privacy Program Ownership: Lead the design, implementation and continuous improvement of our global privacy program, including establishing cross-border data transfer framework; owning the Global Privacy Playbook & Repository and ensuring consistent application across all markets; and building and maintaining data protection documentation such as ROPA and retention policies.
Technology Procurement Agreements: Drive drafting and negotiation of technology procurement agreements - SaaS, licensing, IT services, AI tools, DPAs, and security vendor contracts.
Information Security Partnership: Build and maintain close working relationships with the relevant stakeholders in the IBT department, ensuring Legal involvement in planning and execution of technology projects.
AI Governance: Serve as the legal owner of our AI Usage Policy and AI governance, including review of GenAI features for privacy, confidentiality and data-flow implications.
Geo-Expansion Privacy Readiness: Lead privacy work-streams for market entry.
Training, Awareness & Culture: Own the Privacy Training Program and embed privacy as part of our organizational DNA.
Risk Management: Deliver privacy & data-security risk assessments, propose mitigation strategies, and drive prioritization based on business and regulatory impact.
Business Partnering & Proactive Leadership: Act as a strategic, proactive business partner to the companys stakeholders, leading processes end-to-end and influencing cross-functional outcomes.
Corporate and Commercial Legal Support: Provide legal consultation to company departments on a wide range of legal matters.
Requirements: A Bachelor's law degree (LL.B.) from a leading academic faculty.
A valid license to practice law in the country of residence.
5-10 years of relevant legal experience, with a substantial portion focused on privacy / data protection / technology, gained in a leading law firm and/or in-house at a multinational company.
Proven hands-on experience leading global privacy programs and projects.
In-depth knowledge of privacy regulation, including GDPR;
Advantage: familiarity with the Pharma / Life-Sciences industry.
Required qualification:
High professional fluency in English (written and verbal).
Strategic and proactive mindset: ability to own and drive a global function rather than execute tasks reactively.
Strong leadership, ownership and accountability for cross-functional, organization-wide processes.
Strong analytical, drafting and risk-balancing skills, with attention to detail and precise legal language.
Capable of working independently, prioritizing under pressure and managing multiple parallel matters across jurisdictions.
High professional ethics, integrity and discretion when handling sensitive personal data.
*Kindly submit your CV in English.
This position is open to all candidates.