Job Details
Experience Needed:
Career Level:
Education Level:
Salary:
Job Categories:
Skills And Tools:
Job Description
- Participates to company’s compliance committee (or similar governance structure), to highlight Privacy risks and status of Privacy program deployment.
- Liaises with business process owners, to build understanding of Privacy risks related to their personal information processing activities and provides advice on how to mitigate these risks, by embedding Privacy into the design of business processes.
- Collaborates with IT on compliance assessments and Internet compliance review process.
- Plans and deploys a local Privacy program, in terms of Policies and Procedures, Training and Communication, Testing and Monitoring, in accordance with the requirements from J&J’s global Privacy Framework.
- Coordinates the roll out of Privacy training in accordance with agreed training plan in company. Develops local training content and awareness programs for employees and contractors, where needed.
- Drafts and incorporates adequate Privacy language in agreements with third party service providers, business partners, Healthcare Professionals and patients. Tailors EMEA Privacy policies and notices templates to the meet specific local requirements.
- Assists business process owners with self-assessments.
- Drive and leads regular cross sector compliance council meetings in coordination with Healthcare Compliance Officers (HCCO)
- Assists HCCO’s in compliance projects as needed
- Serves as first point of contact for internal and external audits and inspections, requests for access and correction of personal information or complaints against the organization.
- Manages company’s Privacy incident response process, in close collaboration with the Global Privacy Team, IT Security, Law Department and relevant business process owners.
- Coordinates execution of resulting remediation action plans.
- Assumes Data Protection Officer role (if mandated by law or if provided as an option by law and considered relevant by management).
- Makes required notifications and filings to Privacy regulator (if applicable).
- Builds and maintains knowledge about applicable laws and regulations and assesses impact of changes in laws to Privacy program.
- Provides advice on Privacy Impact Assessments as required.
- Conducts legal research to build and maintain knowledge about applicable laws and regulations, assesses impact of changes in laws to Privacy program and communicates potential impact proactively to stakeholders, where possible.
- Actively engages with the Global Privacy Team and participates to its information sessions, to ensure maximal alignment with global standards and practices.
Job Requirements
Required work experience and education
- Familiarity with the healthcare industry and its business processes
- Functional understanding of applicable Privacy laws and regulations
- Experience with the roll out of compliance programs
- BA/BS, degree or equivalent preferred and 3-5 years business experience. Law degree is beneficial but not a requirement
Required skill set
- Ability to maintain the highest standards of quality, compliance and accountability when advising the business
- Demonstrable ability to engage with a range of business units and functions and uncover their objectives and needs
- Ability to translate a wide variety of principles and, sometimes complex, legal requirements into actionable solutions for the business
- Excellent organizational, facilitation, communication and presentation skills
- Global mindset and preparedness to incorporate global standards and practices, for consistency and efficiency reasons
- Ability to work autonomously
