Sr Mgr, Online Tracking, AM, CBT Partner

At Johnson & Johnson, we believe health is everything. Our strength in healthcare innovation empowers us to build a world where complex diseases are prevented, treated, and cured, where treatments are smarter and less invasive, and solutions are personal. Through our expertise in Innovative Medicine and MedTech, we are uniquely positioned to innovate across the full spectrum of healthcare solutions today to deliver the breakthroughs of tomorrow, and profoundly impact health for humanity. Learn more at jnj.com.

As guided by Our Credo, Johnson & Johnson is responsible to our employees who work with us throughout the world. We provide an inclusive work environment where each person is considered as an individual. At Johnson & Johnson, we respect the diversity and dignity of our employees and recognize their merit.

Job Function:

Legal & Compliance

Job Sub Function:

Enterprise Compliance

Job Category:

Professional

All Job Posting Locations:

Beerse, Antwerp, Belgium, New Brunswick, New Jersey, United States of America

Job Description:

We are searching for the best talent for Sr Mgr, Online Tracking, AM, CBT Partner.
 

The Senior Manager, Privacy Governance & Operations – Online Tracking Technologies, Asset Management & CBT Partnership is a critical operational and technology leadership role within the Global Privacy Office. This role owns and evolves three foundational global privacy capabilities:

Cookie & Online Tracking Consent Management, Privacy Asset Management (systems and information assets containing personal data), and Primary operational interface between GPO and Corporate Business Technology (CBT).

This role ensures that privacy platforms, inventories, and digital compliance capabilities are designed, built, and operated as scalable enterprise solutions—supporting compliance with global privacy laws, enabling first‑line execution by the business, and providing high‑quality data and intelligence for governance, assurance, and regulatory response. The role is intentionally designed for a technologist with strong IT roots and business-facing experience, capable of translating privacy requirements into durable technology solutions.
 

Key Responsibilities

1. Global Cookie & Online Tracking Consent Management

• Own the end‑to‑end governance, operation, and evolution of the Company’s global Cookie Consent Management Program, ensuring compliance with online tracking, transparency, and choice requirements across jurisdictions.

• Oversee the technical implementation and operational use of consent tooling (e.g., OneTrust or successor platforms) across all global digital assets, including websites, applications, and emerging digital engagement channels.

• Establish global standards for:

  • Cookie classification and taxonomy

  • Consent models and user interface patterns

  • Banner configuration, localization, and deployment

  • Consent record retention, auditability, and reporting

• Partner with Legal, Digital, Marketing, Medical, and regional privacy leaders to ensure consistent deployment without fragmenting consent logic or creating unmanaged local solutions.

• Drive modernization initiatives to address complex digital ecosystems, including multi‑domain environments, tag management, third‑party technologies, and evolving regulatory interpretation.
   

2. Enterprise Privacy Asset Management (Information Assets)

• Serve as GPO’s global owner of the Privacy Asset Management capability, ensuring the Company maintains a comprehensive, accurate, and usable inventory of systems and assets that process personal data.

• Ensure each asset has:

  • A clearly defined asset owner

  • Complete visibility into types of personal data processed

  • Alignment with data categories, processing purposes, and jurisdictions

  • Ongoing lifecycle tracking (new, changed, retired systems)

• Establish asset management as a foundational dependency for:

  • Records of Processing Activities (ROPAs)

  • Data Subject Rights fulfillment

  • Incident response and impact analysis

  • Privacy Impact Assessments and compliance reviews

• Partner closely with CBT to embed privacy asset identification into SDLC and change processes, ensuring new or modified systems are captured by design, not retroactively.
   

3. Pri