Executive Director, Global Privacy & Data Protection

Overview

A biopharmaceutical organization focused on developing novel therapeutics for metabolic dysfunction-associated steatohepatitis (MASH) is seeking an experienced Privacy & Data Protection Attorney. This role is critical in leading and supporting global privacy, data protection, and artificial intelligence (AI) initiatives to ensure compliance with international and U.S. privacy laws and to advise on the responsible use of data and emerging technologies.

Responsibilities

• Provide legal advice on international and U.S. privacy laws, including consumer data protection, employee data, and marketing practices
• Lead compliance efforts related to U.S. laws such as CCPA/CPRA, HIPAA, and other privacy and data security frameworks
• Collaborate with IT, Security, Product, and Data teams to embed privacy-by-design and security-by-design principles into systems and workflows
• Advise on legal and regulatory considerations related to AI, including data usage, model training, automated decision-making, and bias mitigation
• Draft, review, and negotiate privacy-related agreements such as data processing agreements (DPAs), vendor contracts, and cross-border data transfer mechanisms
• Develop, implement, and maintain privacy policies, training programs, notices, and internal governance frameworks
• Conduct privacy impact assessments (PIAs) and data protection impact assessments (DPIAs)
• Monitor and interpret new and emerging privacy, cybersecurity, and AI regulations and translate them into actionable business guidance
• Support response efforts related to potential data breach incidents and cybersecurity events
• Provide training and awareness programs for internal stakeholders on privacy and data protection best practices
• Perform other duties as required

Requirements

• Juris Doctor (JD) from an accredited U.S. law school
• Active bar membership in at least one U.S. jurisdiction
• Minimum of 12 years of relevant experience in privacy, data protection, or technology law (law firm and/or in-house)
• Strong knowledge of global and U.S. privacy laws and regulatory frameworks
• Experience advising on IT systems, data architecture, and cybersecurity practices
• Familiarity with AI technologies and associated legal and ethical considerations
• Proven ability to work cross-functionally with technical and business teams
• Excellent drafting, negotiation, and communication skills

Preferred Qualifications

• Prior in-house experience at a publicly traded pharmaceutical or healthcare company
• Background in technology, computer science, or information systems (or equivalent practical experience)
• Familiarity with AI governance frameworks and emerging regulations

Key Competencies

• Analytical and strategic thinker with strong problem-solving abilities
• Ability to balance legal risk with business objectives
• Highest level of integrity and professionalism
• Adaptability in a rapidly evolving regulatory and technological landscape
• Strong project management and organizational skills

Compensation & Benefits

• Estimated salary range: $313,000 to $360,000 per year
• Compensation includes base pay, bonus, and equity opportunities
• Equity is provided to all full-time employees to align individual and company performance
• Comprehensive benefits including flexible paid time off, medical, dental, vision, life/disability insurance
• 401(k) offerings including traditional, Roth, and employer match
• Additional voluntary benefits such as supplemental life insurance and legal services
• Mental health benefits through an Employee Assistance Program for employees and their families
• Reasonable accommodations provided for individuals with disabilities throughout the hiring process

Location

• This position may be hybrid or remote

Equal Opportunity

Employment decisions are made without regard to race, ethnicity, color, religion, sex, gender identity, sexual orientation, national origin, age, disability, protected veteran or disabled status, or other characteristics protected by applicable federal, state, or local law.