Job Description Summary

The Privacy Counsel EMEA is a member of the BD Privacy Office and serves the BD Privacy and Data Protection Programme and Operating Model, reporting to the Privacy Officer.

This role is responsible for assisting the Privacy Officer in:
• Overseeing the development of all aspects of the BD privacy and data protection strategy in EMEA with a specific focus on, but not limited to, the General Data Protection Regulation (GDPR) and the way in which BD has implemented it in its business (i.e. BD GDPR Building Blocks and BD GDPR Framework)
• Executing the BD privacy and data protection programme across the Region, that is in as integrated and consistent a manner as reasonably necessary to embed and ensure compliance with privacy laws for all of the relevant BD businesses and functions to meet the needs of BD businesses and customers and the expectations of the regulators

• Privacy Counselling: serve as a point of contact for internal stakeholders in the various BD businesses, functions and countries, provide them with expert advice on subject matter and, with direction from the Privacy Officer, design and implement appropriate processes and controls to address privacy gaps and mitigate privacy risks
• Project Management: provide project management leadership and support for privacy related projects, working closely with other functions (such as Technology & Global Services , Medical Affairs, Law Group and HR) to ensure that privacy is embedded at the design stage of all initiatives and privacy issues are remediated systematically
• Data Lifecycle Management: maintain, in collaboration with the Privacy Officer and relevant internal stakeholders, BD inventories of processing activities, IT assets and products and support the business to perform privacy impact assessments when appropriate and remediate identified risks
• Written Standards: with direction from the Privacy Officer, establish effective policies, procedures, work instructions across BD to provide guidance to BD business on how it can achieve its objectives while complying with privacy policies and laws.
• Training & Awareness: help oversee, direct, deliver, or ensure delivery of effective privacy training and guidance to all employees, contractors, vendors, and other third parties on BD policies and procedures in the privacy area
• Third Party Management: support the privacy third party assessment process and, supported by the Privacy Officer, manage with the impacted BD functions the privacy contract templates
• Incident Management and Individual Rights Processing: support the Privacy Officer in managing Data Subject Rights and personal data breaches, including drafting appropriate answers and interacting with local Supervisory Authorities, in collaboration with other relevant functions and, when necessary, the HR and Law Group
• Monitoring and Remediation: support the design and delivery of plans for privacy compliance, auditing and monitoring activities to assess the effectiveness and efficiency of the BD privacy compliance program, in coordination with the other BD compliance and operational assessment functions.

• University degree in Law required
• In-house legal experience with a medical device or pharmaceutical company preferred, or similar experience in law firms or consultancies
• At least 4 years' experience of European and international privacy program development and management, including people management roles
• IAPP certification(s) (CIPP, CIPM, CIPT)
• Deep knowledge of European privacy and data protection laws (in particular the GDPR and local privacy laws, regulations and best practices)
• Knowledge and experience of building and maintaining compliance programs and/or controls in a highly regulated area is required.
• Experience of working in a multinational company and a complex, matrixed environment is a significant plus.
• Proven ability to proactively drive projects as a self-starter, to exercise good independent judgement, and to effectively manage multiple priorities.
• Ability to travel up to 10% of the time (Switzerland or US twice a year)