Legal Director, Privacy Job
Novo Nordisk
Date: May 18, 2013
Location: Princeton, NJ, US
Requisition ID 11374BR
Title Legal Director, Privacy
Job Category Legal
Job Description PURPOSE:
Responsible for the development, implementation, and maintenance of the Novo Nordisk (NNI) Privacy strategy and program for North America.
RELATIONSHIPS:
Reports to Senior Corporate Counsel with responsibility for advising the company on privacy laws and regulations.
ESSENTIAL FUNCTIONS:
• Formulate enterprise-wide privacy policies and procedures, consistent with applicable U.S. and global laws
• Create content and guide delivery of roles-based education and awareness of privacy issues and their impact to our brand and business
• Act as the company’s privacy subject matter expert with knowledge of applicable state, federal and international laws and regulations including the FTC Act, CAN-SPAM, HIPAA/HITECH and related medical information privacy laws, laws and regulations related to employee privacy, and other global laws and regulations including those implementing the EU Data Protection Directives
• Provide leadership and oversight over cross-functional privacy committee including, but not limited to representatives from marketing, sales, human resources, clinical trial operations, medical affairs, IT, and corporate communications. Liaise with privacy function for NNI parent company to ensure compliance with global policies and procedures, and applicable laws
• Act as key point person (partnering with company stakeholders) for privacy data events/breaches with responsibility for implementing response plan and recommending any needed changes to business practices
• Maintain knowledge of external legal and industry developments in privacy including evolving laws and regulations, and proactively propose advisable business processes or practices
• Through on-going privacy risk assessments, identify areas of potential brand impact and legal consideration and propose and drive solutions
• Maintain knowledge of the relevant information technology systems and applications to drive systematic solutions and improvements
• Liaise with privacy professionals at peer companies and industry organizations
• Partner with company’s government affairs department on legislative and regulatory initiatives related to privacy affecting the company’s business
PHYSICAL REQUIREMENTS:
Not applicable
DEVELOPMENT OF PEOPLE:
Not applicable
KEY SUCCESS FACTORS: EDUCATION, EXPERIENCE, KNOWLEDGE AND SKILLS
• A Bachelor's degree is required; JD preferred
• At minimum of 8-10 years of experience with at least 2-4 years of experience in a Compliance department or similar function for global company, with significant experience dealing with healthcare/pharmaceutical privacy matters
• Certification as a Certified Information Privacy Professional highly desired
• In-depth knowledge of applicable state, federal and international privacy laws
• Recognized subject matter expert within the privacy profession
• Experienced in successfully managing a comprehensive privacy program, with ability to prioritize, design, resource and implement program is preferred
• Demonstrated experience making sound risk assessments, and identifying and resolving legal and regulatory issues quickly and effectively and ability to make real-time decisions
• Proven track record as a strong team player with ability to work cross-functionally in a complex organizational structure
• Ability to communicate effectively at all levels of an organization
• Ability to work independently and be pragmatic and results focused
• Can take a dynamic approach to implementing a privacy program
Department LGQ - LEGAL/GOVT & QUALITY AFFAIRS (1a)
Position Location US - Princeton, NJ
City Princeton
State/Provinces US - NJ
Degree Required Bachelor's Degree Required
Percent Travel 10 - 20%
Title Legal Director, Privacy
Job Category Legal
Job Description PURPOSE:
Responsible for the development, implementation, and maintenance of the Novo Nordisk (NNI) Privacy strategy and program for North America.
RELATIONSHIPS:
Reports to Senior Corporate Counsel with responsibility for advising the company on privacy laws and regulations.
ESSENTIAL FUNCTIONS:
• Formulate enterprise-wide privacy policies and procedures, consistent with applicable U.S. and global laws
• Create content and guide delivery of roles-based education and awareness of privacy issues and their impact to our brand and business
• Act as the company’s privacy subject matter expert with knowledge of applicable state, federal and international laws and regulations including the FTC Act, CAN-SPAM, HIPAA/HITECH and related medical information privacy laws, laws and regulations related to employee privacy, and other global laws and regulations including those implementing the EU Data Protection Directives
• Provide leadership and oversight over cross-functional privacy committee including, but not limited to representatives from marketing, sales, human resources, clinical trial operations, medical affairs, IT, and corporate communications. Liaise with privacy function for NNI parent company to ensure compliance with global policies and procedures, and applicable laws
• Act as key point person (partnering with company stakeholders) for privacy data events/breaches with responsibility for implementing response plan and recommending any needed changes to business practices
• Maintain knowledge of external legal and industry developments in privacy including evolving laws and regulations, and proactively propose advisable business processes or practices
• Through on-going privacy risk assessments, identify areas of potential brand impact and legal consideration and propose and drive solutions
• Maintain knowledge of the relevant information technology systems and applications to drive systematic solutions and improvements
• Liaise with privacy professionals at peer companies and industry organizations
• Partner with company’s government affairs department on legislative and regulatory initiatives related to privacy affecting the company’s business
PHYSICAL REQUIREMENTS:
Not applicable
DEVELOPMENT OF PEOPLE:
Not applicable
KEY SUCCESS FACTORS: EDUCATION, EXPERIENCE, KNOWLEDGE AND SKILLS
• A Bachelor's degree is required; JD preferred
• At minimum of 8-10 years of experience with at least 2-4 years of experience in a Compliance department or similar function for global company, with significant experience dealing with healthcare/pharmaceutical privacy matters
• Certification as a Certified Information Privacy Professional highly desired
• In-depth knowledge of applicable state, federal and international privacy laws
• Recognized subject matter expert within the privacy profession
• Experienced in successfully managing a comprehensive privacy program, with ability to prioritize, design, resource and implement program is preferred
• Demonstrated experience making sound risk assessments, and identifying and resolving legal and regulatory issues quickly and effectively and ability to make real-time decisions
• Proven track record as a strong team player with ability to work cross-functionally in a complex organizational structure
• Ability to communicate effectively at all levels of an organization
• Ability to work independently and be pragmatic and results focused
• Can take a dynamic approach to implementing a privacy program
Department LGQ - LEGAL/GOVT & QUALITY AFFAIRS (1a)
Position Location US - Princeton, NJ
City Princeton
State/Provinces US - NJ
Degree Required Bachelor's Degree Required
Percent Travel 10 - 20%
Nearest Major Market: New Jersey
Job Segments: Manager, Law, Pharmaceutical Sales, Pharmaceutical, Corporate Communications, Management, Legal, Sales, Science, Marketing