Job Description
DePuy Synthes is recruiting for a Director, Privacy Officer & DPO, EMEA located in Zug, Switzerland. This senior privacy lead is responsible for privacy governance and DPO duties, ensuring compliance with global and local data protection laws, and embedding privacy‑by‑design across business operations and digital products. The role partners with Legal, IT, Security, Health Care Compliance, HR, Commercial, Clinical, Medical Safety, HEMA, and R&D teams.
Key Responsibilities
Lead the implementation and ongoing oversight of the DePuy Synthes privacy program in the region, ensuring alignment with applicable local and regional data protection laws and regulations.
Advise business partners on privacy and data protection requirements in all stages of R&D, product development, commercialization, clinical trials, HEMA activities and lifecycle management.
Serve as the designated Data Protection Officer (DPO), acting as an independent advisor on data protection obligations and risk management.
Lead efforts to embed privacy capabilities in named privacy stewards from relevant functions, including handling escalations, driving consistency and delivering ongoing training and education to the stewards.
Identify any required regional‑specific variants from global privacy policies, standards, and procedures to support compliant collection, use, transfer, and retention of personal data in the region.
Provide strategic guidance to business leaders on privacy risks associated with new products, digital health solutions, clinical activities, and commercial initiatives.
Oversee regional privacy impact assessments, data transfer assessments, and mitigation plans for high‑risk processing activities.
Partner with Information Security and Legal teams to support incident response, breach management, and regulatory communications in the region when required.
Lead privacy training and awareness programs to strengthen a culture of data protection and accountability across the organization.
Monitor regional regulatory developments and emerging privacy risks, translating requirements into practical business guidance.
Maintain external relationships with regional regulators and internal stakeholders to support audits, inquiries, inspections and data incident responses in conjunction with cross‑functional partners.
Provide support for data contracting processes, including for escalations.
Qualifications
Education
Bachelor’s degree required, preferably in Law, Information Systems, Business, or a related field.
Advanced degree (JD, LLM, MBA, or equivalent) preferred.
Required Experience and Skills
Minimum 10–12 years of progressive experience in privacy, data protection, cybersecurity or related legal roles, including leadership responsibility, within a complex global corporation or private practice.
Demonstrated experience serving as, or supporting, a Data Protection Officer function within a regulated environment.
Experience in privacy data regulations in the healthcare industry.
Strong working knowledge of global privacy regulations (e.g., GDPR, APAC privacy frameworks) and their business application.
Proven ability to influence senior leaders and operate effectively in a complex, global organization.
Experience partnering with technology, security, and digital teams on privacy‑by‑design initiatives.
Preferred
Specific data protection or privacy experience within medical devices, medtech, life sciences pharmaceutical industries or healthcare insurers or systems.
Experience supporting global or regional privacy programs across multiple jurisdictions.
Strong judgment, independence, and ability to manage sensitive matters with discretion and integrity.
Prior engagement with regulators and supervisory authorities.
Demonstrated people leadership or program leadership experience.
Other
Languages: Fluent in English required; German proficiency preferred.
Travel: Up to 20% international travel may be required.
Certifications (preferred): CIPP/E, CIPM, CIPT, or equivalent privacy certifications.
Equal Opportunity Employment
Johnson & Johnson is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, age, national origin, disability, protected veteran status or other characteristics protected by federal, state or local law. We actively seek qualified candidates who are protected veterans and individuals with disabilities as defined under VEVRAA and Section 503 of the Rehabilitation Act.
Johnson & Johnson is committed to providing an interview process that is inclusive of our applicants’ needs. If you are an individual with a disability and would like to request an accommodation, external applicants please contact us via https://www.jnj.com/contact-us/careers, internal employees contact AskGS to be directed to your accommodation resource.
#J-18808-Ljbffr