Sr. Corporate Counsel, Digital & IT

Roche fosters diversity, equity and inclusion, representing the communities we serve. When dealing with healthcare on a global scale, diversity is an essential ingredient to success. We believe that inclusion is key to understanding people’s varied healthcare needs. Together, we embrace individuality and share a passion for exceptional care. Join Roche, where every voice matters.

The Position

Sr. Corporate Counsel, Digital & IT

We advance science so that we all have more time with the people we love.

The Opportunity

We believe in the potential of science, data and insights to improve the standard of care for humankind. We also believe the right to Privacy is a fundamental human right. We process personal data with due care. Team members of the Roche Diagnostics North America Digital & Privacy team contribute their talents with a strong focus on collaboration and teamwork to support Roche Diagnostic Customer Areas, North America affiliates and Group colleagues on privacy and digital legal matters.

As a Sr. Corporate Counsel, Digital & IT, you will join our Roche Diagnostics North America Digital & Privacy team to play a key role in providing legal advice on a wide range of topics related to digital matters, including data privacy, online activities and emerging digital technologies and associated laws and regulations.

Responsibilities:

• Primarily, stay updated on applicable cybersecurity requirements, new digital technologies like blockchain, AI, and the Internet of Things and advise on their legal implications.

• Provide guidance to key stakeholders including, other legal colleagues, the business and the Roche Diagnostics North America Digital & Privacy team in order to support the organizations’ compliance with  US state and federal privacy laws (e.g., HIPAA, CCPA/CPRA, TCPA), and other applicable data protection and privacy laws and regulations. Such guidance may include:

  • Review privacy impact assessments for new projects and technologies and advise on risk mitigation strategies.

  • Support the Diagnostics US Privacy Office in developing and maintaining policies, procedure and communications.  

  • Develop and conduct training programs for our legal colleagues and other workforce members on compliance with data privacy laws and best practices for data governance.

  • Review and negotiate contracts with third parties, ensuring that data protection and privacy clauses align with Roche’s policies and positions.

  • Advise and support during the response to a suspected Breach or other data privacy incidents, including internal investigations and advising on notification and reporting obligations.

• Develop and maintain networks by working closely with other Legal and Compliance colleagues, IT security, People & Culture, Finance, Support Services, and other business teams to ensure a cohesive approach to US data protection and digital operations.

Who You Are

SE8

• A Doctor of Jurisprudence (JD) from an ABA-accredited law school, licensed to practice law in one or more of the 50 states in good standing.

• At least five (5) years’ experience practicing law at a large- to medium-sized law firm or within a privacy, compliance, legal or contracting department in a Life Sciences company (i.e., Pharma, Diagnostics, Devices, Biotech).

• Knowledge of, and working experience advising on data privacy and digital matters, federal, state, and international information security and privacy laws, rules, regulations, and industry standards (such as HIPAA, CCPA, GDPR).

• Experience reviewing, drafting, and negotiating; experience with information security and privacy provisions in agreements, Business Associate Agreements and data transfer or processing agreements is preferred.

• A demonstrated ability to establish and maintain open, candid, collaborative, and trusting work relationships.

• An ability to exercise independent judgment and deliver a consistent message in the face of pressure or adversity, and to work with and maintain confidential and sensitive information.

• A positive can-do attitude with a flexible and adaptable approach, wide-ranging experience, business acumen, professionalism, sound judgment and ability to manage responsibilities with an appropriate sense of urgency.

• CIPP/US, CIPP/AIGP or similar certification or willingness to obtain such certification within 6 months of starting the role.

The expected salary range for this position based on the primary location of California is $162,800 – $302,300. 

SE9

• A