OverviewJob Summary (Primary function)
The Director, Privacy Operations US serves as the business partner for Incyte's Privacy program in the US interacting with management and colleagues throughout Legal, Compliance, IT, Commercial, Medical Affairs and other business units to ensure that Incyte maintains systems and processes while adhering to applicable privacy requirements and "privacy by design" principle. The Director, Privacy Operations US, is responsible for implementation of components of the Privacy plan, and manages the implementation of privacy processes and procedures in an effective and efficient manner.
Essential Functions of the Job (Key responsibilities)
- Implement and operationalize Incyte's US Privacy program.
- Work closely with Global Privacy Officer to understand and execute on global strategy and priorities.
- Accountable application and management of US Privacy plan, meeting privacy goals in the near-, mid- and long-term.
- Keep abreast of relevant changes to US privacy laws; coordinate closely with internal legal counsel supporting US privacy to ensure understanding of changes to any applicable privacy laws.
- Work with Privacy colleagues, business stakeholders, and IT to oversee organization adoption of consistent and harmonized approaches to processing personal information.
- Support assigned business groups to ensure that Incyte's privacy obligations are met during pre and post product launch activities.
- Manage the Privacy Assessment (PA) and Records of Processing Activities (ROPA) process in the US.
- Working collaboratively with the Privacy Operations Team to oversee the US Privacy Champions network to ensure regular feedback/input is obtained from the business units and Privacy's messages are optimally disseminated through the businesses.
- Working collaboratively with the Privacy Operations Team, ensure that employees/contractors are appropriately trained on company privacy policies, data handling practices and procedures, and legal obligations.
- Member of the Global Privacy Steering Committee, composed of leaders from key Legal, Compliance and IT groups, to focus on pertinent privacy developments/risks.
- Respond to data regulators/data subjects in connection with any privacy-related requests received.
- Work closely with Cybersecurity team to safeguard privacy interests.
- Liaise with IT and relevant business groups on privacy aspects of new technologies and solutions, including AI.
Qualifications (Minimal acceptable level of education, work experience, and competency)
- BS / BA or equivalent degree
- Continuing education in privacy and/or data protection or CIPP/E certification.
- 8+ years of experience (or its equivalent) working in pharmaceutical or a biotechnology companies or in the life sciences related consulting practice or firm.
- At least five (5) years' experience working in privacy and data protection contributing to a privacy program within the pharmaceutical/medical device/healthcare industries.
- Strong written and oral communication skills, including the ability to communicate concisely, integrate legal, regulatory and business knowledge, and provide risk-based operational solutions.
- Strong attention to detail.
- Ability to manage multiple tasks simultaneously, handle highly sensitive information appropriately, and flourish in a fast-paced environment.
- Excellent interpersonal skills, with the ability to work well independently as well as part of a team.
- Excellent organization, project management, and prioritization skills.
Disclaimer: The above statements are intended to describe the general nature and level of work performed by employees assigned to this job. They are not intended to be an exhaustive list of all duties, responsibilities, and qualifications. Management reserves the right to change or modify such duties as required.
