Privacy Officer and Counsel

Sanofi • Cambridge, MA

1d

About The Position

Ready to push the limits of what’s possible? Join Sanofi in one of our corporate functions and you can play a vital part in the performance of our entire business while helping to make an impact on millions around the world. As Data Privacy Officer - Counsel - at Sanofi, you will oversee the data protection and privacy strategies, breach notification and data loss prevention process, ensure compliance with global and US privacy/AI laws, provide data privacy legal guidance, manage privacy risk assessments, and collaborate with cross-functional teams to implement privacy best practices on projects related to mergers and acquisitions and innovation projects. We are an innovative global healthcare company with one purpose: to chase the miracles of science to improve people’s lives. We’re also a company where you can flourish and grow your career, with countless opportunities to explore, make connections with people, and stretch the limits of what you thought was possible. Ready to get started? About Sanofi We’re an R&D-driven, AI-powered biopharma company committed to improving people’s lives and delivering compelling growth. Our deep understanding of the immune system – and innovative pipeline – enables us to invent medicines and vaccines that treat and protect millions of people around the world. Together, we chase the miracles of science to improve people’s lives.

Requirements

• Juris Doctorate (JD) degree from an accredited law school, preferably with a focus in data privacy or cybersecurity, and a valid license to practice law in the US
• In depth knowledge of U.S. State and federal privacy laws/regulations (CCPA, HIPAA), data breach notification regulations and familiarity with AI regulations
• Experience and familiarity with observing the legal and policy landscape for future changes that impact your practice area
• Previous privacy/AI/breach notification/cybersecurity law, data loss prevention experience in a law firm
• Healthcare experience, specifically providing product counseling to Product Management in dermatology, immunology, respiratory space, or technology product/marketing teams
• Relevant privacy certifications (CIPP-US)
• Minimum of 5 years of legal experience.
• Strong Relationship-building, collaboration and working across functionally.
• Excellent communication skills, both written and verbal, with the ability to convey complex legal concepts to non-experts.
• Proficiency with Word, PowerPoint and other corporate standard software - required.

Nice To Haves

• Experience counseling pharma/biotech companies on FDA or other relevant governmental agencies on healthcare matters
• Experience with privacy compliance management software
• Excellent written and oral communication skills
• Team player with a commitment to developing strong collaborative relationships with legal colleagues, business stakeholders and cross-functional teams
• Demonstrated ability to understand legal principles and compliance, as well as business requirements
• Project management
• Commitment to proactively identifying opportunities for improvement and engaging with appropriate stakeholders to propose solutions
• Solutions-oriented; business-oriented
• Self-motivated, able to work independently, reliable, responsive, and accountable to deliver results
• High level of professionalism; strong interpersonal skills
• Proven ability/interest in working across a broad range of subject matter areas
• Strong organizational skills and ability to handle multiple responsibilities and priorities simultaneously and still meet high quality and timeliness standards under pressure
• Willingness to flex job responsibilities and learn new areas
• Strong interpersonal skills and proven ability to work collaboratively in cross-functional/multi-disciplinary teams
• Sound judgment and commitment to ethical conduct

Responsibilities

• Serve as internal Privacy Counsel for the US market and lead on privacy compliance related to mergers and acquisitions, corporate integrations, and innovation projects
• Serve as the main point of contact for privacy integration roadmaps for acquired companies
• Serve as a subject matter expert on privacy diligence assessments and gap analyses
• Expert knowledge of data protection, information security, breach notification, data privacy policies and procedures, in compliance with GDPR, HIPAA, current State Privacy Laws in the US.
• Conduct data privacy impact assessments for projects/products within scope.
• Manage privacy and breach requirements including investigation, reporting, and remediation in accordance with regulatory requirements.
• Ensure documentation and records of data processing activities are maintained accurately for audit purposes

Benefits

• Bring the miracles of science to life alongside a supportive, future-focused team.
• Discover endless opportunities to grow your talent and drive your career, whether it’s through a promotion or lateral move, at home or internationally.
• Enjoy a thoughtful, well-crafted rewards package that recognizes your contribution and amplifies your impact.
• Take good care of yourself and your family, with a wide range of health and wellbeing benefits including high-quality healthcare, prevention and wellness programs and at least 14 weeks’ gender-neutral parental leave.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Education Level: Ph.D. or professional degree