Sr. Corporate Counsel

Emmes

About The Position

The Senior Counsel, Privacy, will be based in India and report to the Chief Legal Officer. This role supports Emmes Group’s global privacy program, advises colleagues across the business on privacy matters, and works with the Legal team on privacy and security aspects of the Company’s contracting activity. This includes data incident management, review of data privacy and security SOPs, and negotiation of Data Processing Agreements (DPAs) and Data Use Agreements (DUAs). The role works across jurisdictions and functions to maintain privacy compliance, support privacy-by-design initiatives, and provide practical guidance to the business. It also monitors developments in privacy law and advises leadership on their impact on Company operations.

Requirements

LL.B., J.D., or equivalent law degree.
Qualified to practice law in India or another relevant jurisdiction and in good standing.
7–10 years of relevant legal experience, with substantial experience in data privacy and security law.
Experience handling data incident management and investigations.
Experience negotiating and drafting DPAs, DUAs, and related privacy and security contract terms.
Experience advising on privacy matters in a global organization.
Strong working knowledge of global data privacy and security laws and frameworks, including GDPR, India’s Digital Personal Data Protection Act, HIPAA, and U.S. state privacy laws.
Demonstrated proficiency in the MS Office suite.
Strong analytical, organizational, and problem-solving skills; attention to detail and sound judgment.
Ability to manage multiple matters and competing priorities in a fast-paced, global environment.
Ability to work collaboratively across functions and geographies, communicate effectively across time zones, and work independently with appropriate escalation.
Excellent written and oral communication skills, including the ability to communicate clearly with colleagues at all levels and in different regions.

Nice To Haves

Experience in a contract research organization, life sciences, healthcare, or technology company.

Responsibilities

Support the development, implementation, and ongoing administration of the global privacy program across the jurisdictions in which the Company operates.
Periodically review data privacy and security SOPs and related policies, and recommend and draft updates to align them with applicable law and industry best practices.
Lead and support data incident management and investigations, including intake, triage, root-cause analysis, remediation, and coordination of required regulatory or contractual notifications.
Advise colleagues on day-to-day privacy questions, including data mapping, privacy impact and risk assessments, retention, and cross-border data transfers.
Advise Legal team colleagues on privacy and security terms in vendor, sponsor, and clinical trial-related agreements.
Support the negotiation, drafting, and review of DPAs and DUAs with sponsors, vendors, sites, and other third parties.
Monitor legal and regulatory developments affecting global data privacy and security, and advise the Chief Legal Officer and business leadership on their impact.
Assist in developing and delivering privacy training and awareness materials.
Maintain privacy compliance records, including records of processing activities, data inventories, and privacy risk registers.
Collaborate with Information Security, Compliance, HR, and business unit stakeholders on privacy-by-design and other cross-functional privacy initiatives.
Track and report relevant program metrics, such as incident response times, DPA/DUA turnaround times, and SOP review status.
Recommend improvements to privacy SOPs, templates, and processes, and help promote privacy and data-protection awareness across the organization.
Perform other duties as assigned by the Chief Legal Officer/Chief Privacy Officer.