Senior Legal Counsel, Data Privacy

embecta•Parsippany, NJ

1d•$150,000 - $225,000•Hybrid

About The Position

The Senior Legal Counsel, Global Privacy serves as the lead attorney for embecta's global privacy program, responsible for executing the company's privacy strategy and overseeing the design, implementation, maintenance, and continuous enhancement of privacy compliance processes worldwide. This role partners closely with stakeholders across the organization to ensure compliance with evolving privacy laws and regulations while enabling business growth and operational objectives. In addition, the position provides commercial legal support to embecta's Canadian business. This is a hybrid position on-site (3) days a week in Parsippany, New Jersey.

Requirements

JD required, along with 5+ years of legal experience, including demonstrated experience handling privacy matters.
Must be licensed to practice law in at least one U.S. state.
Demonstrated experience working with HIPAA/HITECH, GDPR, CCPA/CPRA, CAN SPAM/TCPA and existing or emerging global privacy laws and/or state privacy laws.
Professionalism, discretion, and judgment through sound decision-making to obtain solutions through collaborative efforts across the company.
Strong communication, and project management skills.
Ability to drive change and implement new processes.
Hands-on, willing to roll-up their sleeves and acts as a partner to the business.
Thrives in a fast-paced environment, prioritizes and handles multiple tasks, and exhibits attention to detail.
Experience with Microsoft Office is required.
Willingness to travel up to 10%

Nice To Haves

CIPP/US, CIPP/E and/or CIPM or other relevant privacy certification is highly desirable
Knowledge of compliance risks and considerations related to healthcare sales and marketing activities, including interactions with healthcare professionals and customers and promotional activities is highly desirable
Familiarity with OneTrust platform is a plus.

Responsibilities

Lead the ongoing management and operation of embecta’s global privacy program and coordinate the activities of the Privacy Steering Committee in partnership with the Chief Ethics, Compliance and Privacy Officer.
Provide practical, risk-based legal guidance regarding the application of privacy, data protection, and cybersecurity requirements to the company’s existing and proposed products, services, technologies, systems, and business processes.
Work across functions to design, implement, maintain, and enhance privacy governance processes and operational controls, including processes relating to third-party privacy reviews, data subject access requests, data mapping and inventories, records of processing activities, data protection impact assessments, and privacy impact assessments.
Lead the development and implementation of privacy-by-design standards and practices consistent with applicable legal, regulatory, and industry requirements.
Promote awareness and understanding of privacy requirements through training, communications, guidance materials, and other educational initiatives.
Develop and maintain a strong understanding of the company’s operations, products, systems, technologies, data practices, customers, end users, vendors, and privacy risk environment.
Develop, implement, maintain, and update internal privacy policies, procedures, standards, and work instructions, as well as external privacy notices, website privacy statements, and cookie notices and banners.
Develop and manage an annual privacy risk assessment process and coordinate the tracking and remediation of identified risks.
Advise on privacy incidents and potential data breaches, including risk assessment, investigation, documentation, notification, remediation, and coordination with relevant internal stakeholders.
Develop and refine privacy program metrics and reporting relating to incidents, breaches, data subject requests, risk assessments, training, and other program activities, and recommend appropriate program improvements.
Develop and maintain template data processing agreements, business associate agreements, and similar privacy and data protection agreements.
Support the Legal and Procurement teams in reviewing and negotiating privacy, cybersecurity, and data protection provisions in commercial agreements.
Serve as a legal advisor to embecta’s Canadian business, providing practical, solutions-oriented legal support on a broad range of commercial matters.
Review, draft, and negotiate commercial agreements, including group purchasing organization contracts, requests for proposals, sales agreements, service agreements, and distribution agreements.
Advise business stakeholders on legal risks associated with commercial initiatives, sales and marketing activities, customer arrangements, and distribution matters.
Partner with colleagues and business leadership to support compliance with applicable commercial, regulatory, employment, consumer protection, privacy, cybersecurity, and other legal requirements.