Sr. Corporate Counsel, US Privacy

Roche • Indianapolis, IN

3d • Onsite

About The Position

At Roche, we foster a culture where individuals can express themselves authentically and are embraced for their unique qualities. Our environment encourages personal expression, open dialogue, and genuine connections, ensuring everyone feels valued, accepted, and respected. This allows our team members to thrive both personally and professionally as we work towards preventing, stopping, and curing diseases and ensuring universal access to healthcare. The Senior Counsel, US Privacy will join the North America Digital & Privacy team, playing a crucial role in providing legal advice on data protection, digital initiatives, US privacy laws and regulations, and data governance. The team's focus is on collaboration and teamwork to support Roche Diagnostic Customer Areas, North America affiliates, and Group colleagues on privacy and digital legal matters.

Requirements

• A Doctor of Jurisprudence from an ABA-accredited law school.
• Licensed to practice law in one or more of the 50 states in good standing.
• At least eight (8) years’ experience practicing law at a large- to medium-sized law firm or experience within a privacy, compliance, legal, or contracting department in a Life Sciences company (i.e., Pharma, Diagnostics, Devices, Biotech).
• Knowledge of, and working experience advising on data privacy and digital matters, federal, state, and international information security and privacy laws, rules, regulations, and industry standards (such as HIPAA, CCPA, GDPR).
• Experience reviewing, drafting, and negotiating; experience with information security and privacy provisions in agreements, Business Associate Agreements, and data transfer or processing agreements is preferred.
• A demonstrated ability to establish and maintain open, candid, collaborative, and trusting work relationships.
• An ability to exercise independent judgment and deliver a consistent message in the face of pressure or adversity, and to work with and maintain confidential and sensitive information.
• A positive can-do attitude with a flexible and adaptable approach, wide-ranging experience, business acumen, professionalism, sound judgment, and ability to manage responsibilities with an appropriate sense of urgency.
• CIPP/US or similar certification or willingness to obtain such certification within 6 months of starting the role.

Nice To Haves

• Experience with information security and privacy provisions in agreements, Business Associate Agreements and data transfer or processing agreements is preferred.

Responsibilities

• Provide guidance to key stakeholders, including Legal and Compliance colleagues, the business, and the Roche Diagnostics North America Digital & Privacy team, to ensure compliance with US state and federal privacy laws (e.g., HIPAA, CCPA/CPRA, TCPA) and other applicable data protection and privacy laws and regulations.
• Review privacy impact assessments for new projects and technologies and advise on risk mitigation strategies.
• Support the Diagnostics US Privacy Office in developing and maintaining policies, procedures, and communications.
• Develop and conduct training programs for Legal and Compliance colleagues and other workforce members on compliance with data privacy laws and best practices for data governance.
• Review and negotiate contracts with third parties, ensuring data protection and privacy clauses align with Roche’s policies and positions.
• Advise and support during the response to suspected breaches or other data privacy incidents, including internal investigations and advising on notification and reporting obligations.
• Stay updated on applicable cybersecurity requirements and new digital technologies (e.g., blockchain, AI, Internet of Things) and advise on their legal implications.
• Develop and maintain networks by working closely with other Legal and Compliance colleagues, IT security, People & Culture, Finance, Support Services, and other business teams to ensure a cohesive approach to US data protection and digital operations.

Benefits

• Relocation benefits are not available for this position.
• A discretionary annual bonus may be available based on individual and Company performance.
• This position also qualifies for the benefits detailed at the link provided below.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: Ph.D. or professional degree