Associate Legal Director, Global Privacy

embecta is a global medical device company with a 100-year legacy in insulin delivery and diabetes care. Driven by innovation, purpose, and a commitment to improving lives, we are expanding our portfolio of solutions to serve even more patients, healthcare providers, and communities around the world.

Why embecta?

Imagine the long legacy and global scale of an industry leader combined with the agility, speed, and entrepreneurial energy of a startup—that's embecta. We are evolving from a company with more than 100 years of experience in diabetes care into a broader medical supplies organization, helping more than 30 million people worldwide live their best lives through innovative solutions, partnerships, and the strength of our global team. At embecta, you are empowered to take ownership, bring your authentic self to work, and accelerate your career alongside inspiring leaders.

The Associate Legal Director, Global Privacy serves as the lead attorney for embecta's global privacy program, responsible for executing the company's privacy strategy and overseeing the design, implementation, maintenance, and continuous enhancement of privacy compliance processes worldwide. This role partners closely with stakeholders across the organization to ensure compliance with evolving privacy laws and regulations while enabling business growth and operational objectives. In addition to its primary responsibilities, the position will provide commercial legal support to embecta's North American business. 

The ideal candidate will have significant experience advising on privacy, data protection, and relevant cybersecurity matters affecting the healthcare or life sciences industry, and a deep understanding of the GDPR, U.S. state privacy laws, Canada's PIPEDA and applicable provincial privacy laws, HIPPA/HITECH, state data breach notification requirements, and other global privacy laws. The ideal candidate will also have a demonstrated interest in developing experience in commercial legal support.

This is a hybrid position for candidates located near embecta's headquarters in Parsippany, NJ or a remote position for candidates within the U.S. Eastern and Central time zones.

What You'll Be Doing

• Lead the ongoing management and operation of embecta’s global privacy program and coordinate the activities of the Privacy Steering Committee in partnership with the Chief Ethics, Compliance and Privacy Officer.
• Provide practical, risk-based legal guidance regarding the application of privacy, data protection, and cybersecurity requirements to the company’s existing and proposed products, services, technologies, systems, and business processes.
• Work across functions to design, implement, and enhance privacy operational mechanisms to meet the needs of the company, including, without limitation, processes for vendor/partner privacy onboarding, DSARs, data mapping, data inventory, records of processing activities, DPIAs and PIAs.
• Support the development and implementation of privacy-by-design principles and practices aligned with applicable legal, regulatory, and industry requirements.
• Promote awareness and understanding of privacy requirements through training, communications, guidance materials, and other educational initiatives.
• Develop and maintain a strong understanding of the company’s operations, products, systems, technologies, data practices, customers, end users, vendors, and privacy risk environment.
• Develop, implement, maintain, and update internal privacy policies, procedures, standards, and work instructions, as well as external privacy notices, website privacy statements, and cookie notices and banners.
• Develop and manage an annual privacy risk assessment process and coordinate the tracking and remediation of identified risks.
• Advise on privacy incidents and potential data breaches, including risk assessment, investigation, documentation, notification, remediation, and coordination with relevant internal stakeholders.
• Develop and refine privacy program metrics and reporting relating to incidents, breaches, data subject requests, risk assessments, training, and other program activities, and recommend appropriate program improvements.
• Develop and maintain template DPA, BAA and similar template agreements and assist the Legal and Procurement teams with the review and negotiation of privacy related contract provisions.
• Provide commercial legal support, including reviewing group purchasing organization agreements, requests for proposals, sales and distribution agreements, and providing practical, solutions-oriented advice on commercial matters.

What We're Looking For

Required Qualifications

• JD required, with at least 5 years of experience required, including experience advising on privacy matters relevant to a life sciences company. Must be licensed to practice law in at least one U.S. state.
• Demonstrated experience working with HIPAA/HITECH, the GDPR, the CCPA/CPRA, CAN SPAM/TCPA and other existing or emerging global privacy laws and U.S. state privacy laws.
• Demonstrated professionalism, discretion, sound judgment and the ability to develop solutions through collaboration across the company.
• Strong communication, and project management skills. Ability to drive change and implement new processes.
• Hands-on and willing to roll-up their sleeves and act as a partner to the business.
• Ability to thrive in a fast-paced environment, prioritize and manage multiple tasks, and demonstrates attention to detail.
• Experience with Microsoft Office is required. Familiarity with OneTrust platform is a plus.
• Willingness to travel up to 10%

Preferred Qualifications

• CIPP/US, CIPP/E and/or CIPM or other relevant privacy certification is highly desirable
• Knowledge of compliance risks and considerations related to healthcare sales and marketing activities, including interactions with healthcare professionals and customers and promotional activities is highly desirable

Location Requirement:

This position may be performed only from U.S. locations where embecta is currently authorized and equipped to employ individuals. At this time, this excludes Alaska, Delaware, Hawaii, Idaho, Iowa, Kansas, Kentucky, Maine, Mississippi, Missouri, Montana, Nevada, New Mexico, North Dakota, Oklahoma, Oregon, Puerto Rico, Rhode Island, Vermont, Washington, West Virginia, and Wyoming.

Competitive base salary based on experience and qualifications: $180,000-$235,000 (subject to variation depending on physical location).  

Posted salary ranges are provided in good faith. embecta reserves the right to adjust ranges depending on the selected candidate’s experience, qualifications, external market conditions, and internal equity considerations.   

Base pay is one component of the Total Rewards package at embecta, which also includes eligibility for an annual bonus and an annual LTI award. Benefits include medical, dental, vision, retirement savings plans, and paid time off. More details about our benefits programs can be found on our Careers page.   

#LI-KM1

embecta is an Equal Opportunity/Affirmative Action Employer.  We do not unlawfully discriminate on the basis of race, color, religion, age, sex, creed, national origin, ancestry, citizenship status, marital or domestic or civil union status, familial status, affectional or sexual orientation, gender identity or expression, genetics, disability, military eligibility or veteran status, or any other protected status.