Senior Compliance Officer

Senior Compliance Officer, EMEA

Department: Legal & Compliance
Role reports to: VP & Chief Compliance Officer
Location: Utrecht, Netherlands

Medline is a leading provider of medical-surgical products and supply chain solutions, serving all points of care. Through a wide-ranging product portfolio, a robust supply chain network and modern clinical solutions, Medline helps healthcare providers (HCPs) improve their clinical, financial and operational outcomes. Headquartered in Northfield, Illinois, United States, the company employs more than 43,000 people worldwide and operates in more than 100 countries and territories. Outside the US, Medline International B.V. serves as the international headquarters and is located in the Netherlands (currently Arnhem; to be moved to Utrecht in 2025). To learn more about Medline’s operations in Europe, visit www.medline.eu

Purpose

As Compliance Director, you’ll play a pivotal role in Medline’s success. This is more than a compliance role – it’s an opportunity to influence, innovate, and shape the company’s future in a fast-paced, international environment. Medline is set to grow substantially, offering you the chance to leave your mark and develop alongside it.

You will be responsible for implementing and maintaining the Enterprise Ethics & Compliance Programme across Medline’s Europe, Middle East, and Africa business and operations, including any necessary additions based on applicable local law. You will also be implementing and maintaining the Enterprise Data Protection & Privacy programme in the EMEA business, including compliance with GDPR, e-privacy and other applicable legislation.

How can you help us?

• Implement and maintain the risk-based Enterprise Ethics & Compliance Programme for Medline’s EMEA business and operations, including, but not limited to:
  - Work closely with global Ethics & Compliance (OEC) colleagues and business teams to implement and manage the company’s anti-bribery and anti-corruption program. This includes overseeing third-party due diligence, managing business courtesies (such as gifts and hospitality), and ensuring proper compliance in contracting processes
  - Evaluate and manage interactions with healthcare providers, ensuring compliance with competition laws and conflict of interest policies
  - Respond to reports of misconduct and lead or oversee investigations related to breaches of compliance policies or the Code of Conduct
  - Implement and manage the EMEA transparency reporting program in close collaboration with the global transparency team, while staying up to date with relevant laws and regulations

• Act as a central point of contact, collaborating with and advising internal business partners on the review of programmes and initiatives across departments to ensure alignment and adherence to enterprise policies, practices and investigations.
• Develop and maintain operational policies and procedures consistent with the enterprise policies, legal requirements, and operational risk management objectives.
• Create and provide ongoing training and awareness to promote compliance and to mitigate operational risks.
• Work closely with the Information Security Officer to help manage monitoring, risk and mitigation.
• Work closely with the global Data Protection & Privacy team to implement and maintain the Enterprise Data Protection & Privacy programme in the EMEA business, including compliance with GDPR, e-privacy and other applicable legislation.
• Offer consultation as part of the organisation’s data privacy incident and breach management programme.
• Monitor organisational practices to identify new processes or material changes to existing processes and ensure the implementation of Enterprise Policies and Procedures.
• Remain current with applicable laws and regulations and track new compliance requirements, expectations, and best practices.

Are you a match?

• University law degree from any European/European Union jurisdiction
• 10+ years relevant working experience in compliance in the healthcare and/or medical device industry, combined with at least 4 years within data protection (e.g. CIPP/E)
• Experienced with applying risk assessment, screening and monitoring tools
• Expertise of local transparency laws, regulations or guidelines, applicable for the medical devices industry
• Knowledge of GDPR, data protection laws, supervisory authority guidance and regulations
• Excellent communication skills in English, both written and verbal; Dutch, German, French or Spanish will be seen as valuable assets
• Credibility, integrity and high moral standards expected
  

We have everything covered

• Modern work environment with flexible working options at Medline's regional H