Data Privacy Officer, Counsel

Job Title: Data Privacy Officer, Counsel

Location: Cambridge, MA, Morristown, NJ

About the Job

Ready to push the limits of what’s possible? Join Sanofi in one of our corporate functions and you can play a vital part in the performance of our entire business while helping to make an impact on millions around the world. 

About Sanofi:
We’re an R&D-driven, AI-powered biopharma company committed to improving people’s lives and delivering compelling growth. Our deep understanding of the immune system – and innovative pipeline – enables us to invent medicines and vaccines that treat and protect millions of people around the world. Together, we chase the miracles of science to improve people’s lives.
 

Main Responsibilities:

• Serve as internal Privacy Counsel and Privacy Officer for the US market

• Expert knowledge of data protection, information security, breach notification, data privacy policies and procedures, in compliance with GDPR, HIPAA, current State Privacy Laws in the US.

• Conduct data privacy impact assessments for projects/products within scope.

• Manage privacy and breach requirements including investigation, reporting, and remediation in accordance with regulatory requirements.

• Liaise with regulatory bodies and internal stakeholders to address any data privacy concerns or compliance issues.

• Provide training and support to Sanofi business unit teams on data privacy best practices and leading data privacy implementation of new state laws.

• Ensure documentation and records of data processing activities are maintained accurately for audit purposes

About You

Basic Qualifications:

• Juris Doctorate (JD) degree from an accredited law school, preferably with a focus in data privacy, and a valid license to practice law in the US

• In depth knowledge of U.S. State and federal privacy laws/regulations (CCPA, HIPAA), data breach notification regulations and familiarity with AI regulations

• Legal, regulatory, and policy analytical ability and knowledge, including experience analyzing proposed laws or regulations relevant to information privacy

• Previous privacy/AI/breach notification/cybersecurity law, data loss prevention experience in a law firm

• Healthcare experience, specifically providing product counseling to Product Management in the pharma/biotech space

• Relevant privacy certifications (e.g., CIPP-US)

• Minimum of 5 years of legal experience.

• Strong Relationship-building, collaboration and working across functionally.

• Excellent communication skills, both written and verbal, with the ability to convey complex legal concepts to non-experts.

• Proficiency with Word, PowerPoint and other corporate standard software - required.

Preferred Qualifications:

• Experience counseling pharma/biotech companies on FDA or other relevant governmental agencies on healthcare matters

• Experience counseling large enterprises on privacy compliance matters

• Experience with privacy compliance management software

Professional Skills/Attributes:

• Excellent written and oral communication skills

• Team player with a commitment to developing strong collaborative relationships with legal colleagues, business stakeholders and cross-functional teams

• Demonstrated ability to understand legal principles and compliance, as well as business requirements

• Commitment to proactively identifying opportunities for improvement and engaging with appropriate stakeholders to propose solutions

• Solutions-oriented; business-oriented

• Self-motivated, able to work independently, reliable, responsive, and accountable to deliver results

• High level of professionalism; strong interpersonal skills

• Proven ability/interest in applying privacy principles across a broad range of subject matter areas

• Strong organizational skills and ability to handle multiple responsibilities and priorities simultaneously and still meet high quality and timeliness standards under pressure

• Willingness to flex job responsibilities and learn new areas

• Ability to work collaboratively in cross-functional/multi-disciplinary teams

• Sound judgment and commitment to ethical conduct

Desirable requirements:

• Product Management experience

• Project Management experience