Chief Privacy Officer & Senior Legal Director

Sets and manages the strategic direction of the Global Privacy legal practice that defines, develops, maintains and implements policies and processes that enable consistent, compliant privacy practices across the Company. Collaborates with senior management and divisional/functional officers to establish governance for privacy compliance, to include acting as Chairman of the Global Privacy Management Committee. Advises business units on personal data protection legal matters relating to the Company, business units and business objectives. Oversee response to regulatory inquiries relating to privacy. Reviews, advises business drafts, and approves data protection requirements in contracts in a variety of areas, including supply/manufacturer, distribution, consulting, non-disclosure, real estate, research, clinical investigator, asset purchase, business acquisitions and mergers, and other areas as needed to ensure business interests are protected. Consults with outside counsel to provide advice in areas of outside counsel's expertise. Manages outside counsel spend within acceptable budgets. Reviews and approves marketing programs, promotional pieces, and product literature and advises business on legal compliance issues involving personal data collection and use for marketing and sales. Advises human resources department on content and implementation of policies and procedures and on personal data protection for labor and employment matters. Provides legal counsel and support in business development activities, including conducting due diligence, advising on employment and benefits issues, facilitating transfer of legal responsibilities, assisting and advising on other acquisition-related issues as they arise, and directing outside counsel in assisting the Company with acquisition issues as needed. Provides legal advice and counsel to Company personnel in diverse matters by assisting, advising, investigating, researching and resolving legal matters within corporate legal policies to ensure that company personnel are aware of and in compliance with applicable OUS, state and federal laws and regulations. Oversees development and delivery of training to Company personnel. Develops, implements and/or revises policies and Standard Operating Procedures consistent with OUS and US privacy laws and regulations and acceptable Company practices. Monitors and ensures compliance with Company privacy policies and SOPs. Establish and support a work environment of continuous improvement that supports BSC's Quality Policy, Quality System and the appropriate regulations for the area they support. Ensure all employees are trained to do their work and their training is documented. Maintain current knowledge of applicable laws and regulatory changes and monitor advances in information privacy technologies to ensure organizational adaptation and compliance. Lead compliance implementation efforts as needed. JD Degree 8 to 12 years of experience focused on privacy and compliance, preferably in-house. Strong business acumen and practical approach to problem solving Leadership and expert communication skills to influence, advocate for and drive change and compliance across a global company Strong written and oral communication skills Understanding of HIPAA and other applicable U.S. privacy and data protection laws and regulations (federal and state) required Certification in one or more of the following: International Association of Privacy Professionals certification (CIPP, CIPM) Certified in Healthcare Privacy Compliance (CHPC) by the Health Care Compliance Association. Understanding of Global data protection trends and regulations International business experience preferred