VP, Chief Privacy Officer, Orthopedics

Job Overview

DePuy Synthes is recruiting for a VP, Chief Privacy Officer (CPO) located in Raynham, MA, Raritan, NJ, Westchester, PA; Ireland or Switzerland. Johnson & Johnson announced plans to separate our Orthopaedics business to establish a standalone orthopaedics company, operating as DePuy Synthes. The process is anticipated to be completed within 18 to 24 months, subject to legal requirements, consultations with works councils and employee representative bodies, and regulatory approvals. Should you accept this position, you would be an employee of DePuy Synthes and would be governed by its employment processes, programs, policies, and benefit plans. This role plays a critical part in protecting patient, customer, employee, and business data while enabling innovation and growth in a highly regulated global healthcare environment.

Key Responsibilities

• Set and execute the global privacy strategy, policies, and governance framework for DePuy Synthes.
• Ensure compliance with global privacy, data protection and cybersecurity laws and regulations (including, e.g., GDPR, U.S. state privacy laws, digital product standards and laws and other applicable international requirements).
• Serve as the primary executive leader for privacy risk management, including oversight of privacy impact assessments and mitigation plans.
• Partner with Legal, R&D, Cybersecurity, and Technology teams to integrate privacy by design and privacy by default into systems, products, and digital initiatives.
• Monitor new and proposed privacy laws and regulations and provide strategic guidance to senior leaders and the Board on privacy risks, trends, and regulatory developments.
• Lead and develop a global privacy organization, including talent development and succession planning, to operationalize privacy requirements and to promote a strong culture of privacy and data protection.
• Oversee privacy contracting practices to ensure compliance with applicable laws, guidelines and best practices.
• Direct the development and implementation of a company wide privacy training program, including the institution and instruction of named privacy stewards in the relevant functions.
• Collaborate with Cybersecurity to oversee privacy incident response, investigations, and support regulatory interactions as needed.
• Work with Government Affairs to develop and maintain trusted relationships with data protection commissioners and government enforcement agencies and execute a strategy for impacting evolving privacy laws affecting the company.

Qualifications Required

• JD in the United States or in a European jurisdiction.
• 14+ years of progressive experience in privacy, data protection, cybersecurity, or related risk functions, including in private practice or within a complex, global organization in a healthcare field (e.g., hospital system, medical device or medtech company, pharmaceutical industry).
• Demonstrated expertise interpreting and applying global privacy regulations in a regulated industry, including GDPR and the U.S. federal and state privacy laws, including HIPAA, and relevant FDCA regulations.
• Experience advising senior executives on privacy strategy and enterprise risk.
• Demonstrated ability to build, operationalize, and improve processes and high performing teams.
• Proven ability to lead global, cross functional teams and influence without direct authority.
• Strong strategic thinking, judgment, and decision making capabilities.

Preferred

• Prior experience supporting or managing a data incident management and response process, including data subject and regulatory enforcement agency notifications.
• Background partnering with information systems, cybersecurity, and digital technology teams.
• Experience supporting business transformation or operating model changes.
• Degree in Information Systems, Master of Business Administration, or Master of Public Policy (a plus).
• Certifications such as CIPP, CIPM, or equivalent (preferred).

Other

• Travel: Up to 20%, domestic and international.
• Language: Fluency in English required; additional languages a plus.
• Certifications: CIPP, CIPM, or equivalent preferred.

Compensation and Benefits

The anticipated salary range is 145,000-266,570 EUR. In addition to base pay, we offer the following benefits:

• An annual bonus with a set target (% of pay) depending on pay grade/location, based on the employee's and company's performance of the previous calendar year, or sales commissions.
• Vacation days.
• Parental leave for a minimum of 12 weeks.
• Bereavement leave.
• Caregiver leave.
• Volunteer leave.
• Well being reimbursement.
• Programs for financial, physical and mental health.
• Service anniversary and recognition awards.
• Eligibility to participate in several insurance plans, and in some locations eligible dependents.

Equal Opportunity Employer

Johnson & Johnson is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, age, national origin, disability, protected veteran status or other characteristics protected by federal, state or local law. We actively seek qualified candidates who are protected veterans and individuals with disabilities as defined under VEVRAA and Section 503 of the Rehabilitation Act. Johnson & Johnson is committed to providing an interview process that is inclusive of our applicants' needs. If you are an individual with a disability and would like to request an accommodation, please email the Employee Health Support Center () or contact AskGS to be directed to your accommodation resource.