US Privacy & Governance Lead

Job Description

About This Role

The Global Privacy Office is part of the Privacy and Data Protection function and provides direction and support to company employees and partners to ensure compliance with various regulatory requirements related to data protection and privacy, and adherence to industry best practices, through the development of policies and standards, training and awareness, consultative services, and ongoing monitoring.  

The US Privacy & Governance Lead will assist the Chief Privacy Officer in operationalizing the global privacy program, with a focus on creating the tools, policies and training needed to enable employees and partners to appropriately and responsibly handle personal data when part of their business activities. This position is specifically oriented to providing leadership to the US regional program, management of our Information Governance program and /or other specific functions as assigned and serves as line manager to others on the team.

What You’ll Do

•   Privacy Program Management – With the Chief Privacy officer, ensure the company is executing the global privacy program in compliance with regional sectoral and jurisdictional regulations.  This includes SOP development, governance and communication/ training to employees, being a resource for functional employees and advising on data protection and data handling standards, etc. Inform and/ or develop the global privacy program as appropriate/ directed. Act as program lead for designated processes, which may include activities such as Vendor Risk Management, Training, or others as assigned. 

•   Information Governance Program Management – With the Chief Privacy officer, execute vision and strategy for data lifecycle management at Biogen and provide oversight to those activities across Biogen to drive regulatory compliance and reduce risk. Define the policies, procedures and execution of Biogen’s Information Governance program, which is designed to ensure that the company’s data and records are appropriately managed across the information lifecycle. Ensure cross-functional collaboration and capability development to ensure governance goals, information management lifecycle standards and best practices for both physical and electronic records are reached.   

•   Privacy by Design – Provide guidance on complex use cases involving personally identifiable information and other data, taking into account consent, notice, use, transparency and systems controls. Work with IT, Security and other teams to ensure incorporation of privacy by design approach into Biogen data processing procedures.

•   Business Consultation - Work with business partners to understand new use cases and operational procedures for new business scenarios involving internal or external data handling, with particular focus on commercial activities. 

•   Regional Compliance - Assist the Chief Privacy Officer in implementing measures throughout the world to ensure compliance with local laws.

•   Monitoring and Compliance – Help monitor country specific regulatory activities to ensure awareness of changes in regulatory environment globally. 

•    Audit and Assess - Support ongoing measurement and auditing on overall effectiveness of the Privacy office and execution of privacy policies and standards, both internally and by third party vendors.

Qualifications

Who You Are

You are a results-oriented leader skilled in navigating ambiguity. As a collaborative business partner with deep experience with US data privacy regulation and trends, you take time to understand the business to ensure pragmatic yet compliant solutions that enable and enhance business strategy.

At Biogen, we focus not only on results, but also on how we achieve our success.  As part of our Biogen Way, we stress the value of collaboration and focus on Caring Deeply, Achieving Excellence, and Changing Lives.  The successful candidate will demonstrate the following qualities:

•    Demonstrated ability in delivering results and advancing Privacy program maturity.
•    Knowledge of data management, information governance and electronic records management principles and best practices and digital preservation theory and practice.
•    Deep understanding of personal data and broad knowledge of data across the business: 12 years’ experience in jobs of increasing responsibility, 8+ years of related experience in legal or data-driven roles and 7+ years of experience in privacy role preferred. Ideally, this would be in the Biotech or Pharmaceutical industry, but relevant experience from other consumer/ regulated industries will also be consider