Sr. Corporate Counsel

Overview

Senior Counsel, Privacy will be based in India and report to the Chief Legal Officer. This role supports the organization’s global privacy program, advises colleagues across the business on privacy matters, and works closely with the Legal team on privacy and security aspects of the organization’s contracting activity.

Key areas include data incident management, review of data privacy and security SOPs, and negotiation of Data Processing Agreements (DPAs) and Data Use Agreements (DUAs).

Responsibilities

• Support the development, implementation, and ongoing administration of the organization’s global privacy program across jurisdictions where the organization operates.
• Conduct periodic review and assessment of data privacy and security standard operating procedures (SOPs) and related policies; recommend and draft updates to ensure alignment with applicable law (e.g., GDPR, India’s Digital Personal Data Protection Act, HIPAA, U.S. state privacy laws) and industry best practice.
• Lead and support data incident management and investigations, including intake, triage, root-cause analysis, remediation, and coordination of required regulatory or contractual notifications, in partnership with Information Security and other stakeholders.
• Advise colleagues on day-to-day privacy questions, including data mapping, privacy impact/risk assessments, retention, and cross-border data transfer issues.
• Advise Legal team colleagues on contractual matters relating to data privacy and security, including review and negotiation of privacy and security terms in vendor, sponsor, and clinical trial-related agreements.
• Support negotiation, drafting, and review of Data Processing Agreements (DPAs) and Data Use Agreements (DUAs) with sponsors, vendors, sites, and other third parties.
• Monitor legal and regulatory developments affecting global data privacy and security and advise the Chief Legal Officer and business leadership on impacts to operations.
• Develop and deliver privacy training and awareness materials for employees and relevant stakeholders.
• Support maintenance of privacy compliance records, including records of processing activities (ROPA), data inventories, and privacy risk registers.
• Collaborate with Information Security, Compliance, HR, and business unit stakeholders on privacy-by-design and other cross-functional privacy initiatives.
• Perform other duties as assigned by the Chief Legal Officer/Chief Privacy Officer.

Requirements

• LL.B./J.D. or equivalent law degree.
• Qualified to practice law in India (or another relevant jurisdiction) and in good standing.
• Minimum of 7–10 years of relevant legal experience, with substantial experience in data privacy and security law.
• Experience handling data incident management and investigations.
• Experience negotiating and drafting Data Processing Agreements (DPAs), Data Use Agreements (DUAs), and related privacy and security contract terms.
• Experience advising on privacy matters in a global organization; experience in a contract research organization, life sciences, healthcare, or technology company preferred.

Preferred Qualifications

• Familiarity with global data privacy and security laws and frameworks (e.g., GDPR, India’s Digital Personal Data Protection Act, HIPAA, U.S. state privacy laws).

Compensation & Benefits

Not specified in the provided job description.

Location

India (based in India)