Overview
At Gilead, we’re creating a healthier world for all people. For more than 35 years, we’ve tackled diseases such as HIV, viral hepatitis, COVID-19 and cancer – working relentlessly to develop therapies that help improve lives and to ensure access to these therapies across the globe. We continue to fight against the world’s biggest health challenges, and our mission requires collaboration, determination and a relentless drive to make a difference.
Every member of Gilead’s team plays a critical role in the discovery and development of life-changing scientific innovations. Our employees are our greatest asset as we work to achieve our bold ambitions, and we’re looking for the next wave of passionate and ambitious people ready to make a direct impact.
We believe every employee deserves a great leader. People Leaders are the cornerstone to the employee experience at Gilead and Kite. As a people leader now or in the future, you are the key driver in evolving our culture and creating an environment where every employee feels included, developed and empowered to fulfil their aspirations. Join Gilead and help create possible, together.
Position Posting Title
ACE Data Privacy & Data Protection Officer (DPO), Assoc. Director / Director
Specific Responsibilities and Skills
The ACE Data Privacy & Data Protection Officer (DPO) is a key contributor to the global Privacy & Data Ethics (“PDE”) Team, and is responsible for managing privacy compliance across Europe, the United Kingdom, Switzerland, Canada and Australia (ACE) region. The PDE team is responsible for Gilead’s global privacy program, including but not limited to, daily operations of the program, implementation, maintenance of policies and procedures, monitoring program compliance, and training. The ACE DPO reports to the Gilead Chief Privacy Officer and may oversee the work of other team members from time to time. The PDE team is a global function and provides matrixed support to corporate business lines as well as country counsel within Gilead’s ACE affiliates.
Privacy Function
* Lead the Company’s privacy programs for ACE to strategically manage potential privacy risks and develop appropriate privacy controls to support business initiatives and use of emerging technologies to ensure compliance with the General Data Protection Regulation (GDPR) and related data protection and privacy matters in accordance with laws and regulations in force in all ACE markets in which Gilead operates.
* Serve as a resource to ACE country counsel for privacy-related issues and escalations and help maintain a harmonized, global approach to issues.
* Manage appropriate privacy and confidentiality consents, authorization forms and information notices and materials.
* Work with IT Security to manage procedures for vetting and auditing vendors for compliance with the privacy and data security policies and legal requirements.
* Manage the process for addressing complaints and requests from data subjects with respect to the enforcement of their rights under applicable laws.
* Provide advice on Data Protection Impact Assessments (DPIAs)
* Manage the relationship with the appropriate regulating bodies to ensure that programs, policies and procedures are consistent with law and regulations.
* Serve as registered Data Protection Officer for purposes of GDPR and other similar legal compliance requirements.
Incident Response
* Evaluate and improve upon process for receiving, documenting, investigating and reporting unauthorized access or disclosure of protected information.
* Manage breach response, including notification to data subjects, law enforcement and regulators as needed.
Policies and Training
* Continue to implement, maintain and improve corporate privacy policies, procedures, and infrastructure.
* Develop and deliver privacy training materials and other communications to increase employee understanding of company privacy policies, data handling practices and procedures and legal obligations.
* Work with business teams and senior management to increase awareness of “best practices” on privacy and data security issues.
* Serve as information privacy resource to the organization regarding release of information and to all departments for all privacy related issues.
Qualifications
* Professional with strong privacy experience; experience in a life sciences industry preferred.
* Qualified solicitor preferred.
* CIPP certification (or equivalent) preferred.
* Knowledge of European privacy laws regulations and best practices.
* Proven track record of project and process development, implementation and project management.
* Results oriented, proactive, responsible and pragmatic with a passion to solve complex problems in creative, efficient and cost-effective way and to translate global compliance environments into actionable policies, processes and programs that enable business objectives.
* Proven track record of getting things done in complex organizational context, often without formal authority in a highly matrixed environment.
* Strong knowledge and interest in emerging technologies.
* Excellent communication skills and outstanding interpersonal skills.
* Ability to work independently and demonstrated experience prioritizing conflicting demands from multiple business clients in an extremely fast-paced environment.
* Strong people management skills
* Self-starter with a high level of initiative and strong work ethic.
As an equal opportunity employer, Gilead Sciences Inc. is committed to a diverse workforce. In order to ensure reasonable accommodation for individuals protected by Section 503 of the Rehabilitation Act of 1973, the Vietnam Era Veterans\' Readjustment Act of 1974, and Title I of the Americans with Disabilities Act of 1990, applicants who require accommodation in the job application process may contact careers@gilead.com for assistance. For more information about equal employment opportunity protections, please view the EEO is the Law poster.
For Current Gilead Employees and Contractors: Please apply via the Internal Career Opportunities portal in Workday.
#J-18808-Ljbffr