Senior Counsel, Digital

At Roche you can show up as yourself, embraced for the unique qualities you bring. Our culture encourages personal expression, open dialogue, and genuine connections,  where you are valued, accepted and respected for who you are, allowing you to thrive both personally and professionally. This is how we aim to prevent, stop and cure diseases and ensure everyone has access to healthcare today and for generations to come. Join Roche, where every voice matters.

The Position

Senior Counsel, Digital 

The Opportunity

We believe in the potential of science, data and insights to improve the standard of care for humankind. We also believe the right to Privacy is a fundamental human right. We process personal data with due care. Team members of the Roche Diagnostics North America Digital & Privacy team contribute their talents with a strong focus on collaboration and teamwork to support Roche Diagnostic Customer Areas, North America affiliates and Group colleagues on privacy and digital legal matters.

As Senior Counsel, US Digital, you would join our Roche Diagnostics North America Digital & Privacy team to play a key role in providing legal advice on cutting-edge developments in AI, cybersecurity, and data privacy. In this high-impact role, you will serve as a trusted advisor supporting innovation while helping to ensure compliance with a dynamic regulatory landscape.

Key Responsibilities:

• Provide US legal analysis and guidance on emerging technologies, including artificial intelligence, blockchain, the Internet of Things, and evolving digital health solutions, with a particular focus on U.S. legal and regulatory requirements.

• Monitor and interpret U.S. cybersecurity regulations and industry standards to advise on how Roche can best assess and manage legal risks across digital products and enterprise systems.

• Advise business leadership and cross-functional stakeholders (including Legal, IT Security, Digital, R&D, Privacy, and Compliance teams) on how to navigate legal risks and opportunities in support of Roche’s digital strategy.

• Provide expert guidance on U.S. federal and state privacy laws, such as HIPAA, CCPA/CPRA, TCPA, and others, including implications for data collection, use, and sharing. Such guidance may include:

  • Cybersecurity compliance and risk mitigation strategies, including incident response and vendor assessments.

  • Reviewing and advising on Privacy Impact Assessments (PIAs) for innovative projects and technologies; develop practical strategies to mitigate legal and compliance risk.

  • Support the shaping and maintaining internal AI and privacy frameworks, policies, and training programs, driving consistent compliance and awareness across the organization.

  • Support contract negotiation and review, ensuring that data protection and privacy provisions in third-party agreements align with Roche's legal risk posture and values.

  • Serve as a key legal advisor in the incident response process for suspected data breaches, including investigations, risk assessments, regulatory notification obligations, and internal coordination.

• Foster a network of collaboration across Legal, Compliance, IT, Security, People & Culture, and other corporate functions to embed privacy, security, and data ethics into Roche's digital transformation journey.

Who You Are

SE8

• A Doctor of Jurisprudence (JD) from an ABA-accredited law school, licensed to practice law in one or more of the 50 states in good standing.

• At least five (5) years’ experience practicing law at a large- to medium-sized law firm or within a privacy, compliance, legal or contracting department in a Life Sciences company (i.e., Pharma, Diagnostics, Devices, Biotech).

• Knowledge of, and working experience advising on data privacy and digital matters, federal, state, and international information security and privacy laws, rules, regulations, and industry standards (such as HIPAA, CCPA, GDPR).

• Experience reviewing, drafting, and negotiating; experience with information security and privacy provisions in agreements, Business Associate Agreements and data transfer or processing agreements is preferred.

• A demonstrated ability to establish and maintain open, candid, collaborative, and trusting work relationships.

• An ability to exercise independent judgment and deliver a consistent