Director, Digital Compliance
for headings. Use - for lists. Use
for prose. Remove boilerplate, navigation, EEO, etc. Keep substantive info.
We need to parse the job description.
Key sections:
- About the role: The first paragraph(s) describing Global Privacy and Digital Trust Program, role description, reporting, purpose, partnership. That's prose.
- Responsibilities: List of key responsibilities bullet points.
- Qualifications: bullet list of qualifications (education, experience, etc.)
- Skills: bullet list of required skills (maybe separate required and preferred? The posting includes "Required Skills" and "Preferred Skills" sections. We can combine into Skills section? The instruction: Use headings for section headings like Skills. We can have Skills heading and list required skills. Preferred skills maybe also under Skills? Could separate but we can include both under Skills heading as list. However we need to avoid filler. The posting includes "Required Skills: Compliance Activities, ..." a long list of skills separated by commas. Also "Preferred Skills: Current Employees apply HERE ..." Actually that seems like a misinterpretation: The posting includes "Preferred Skills: Current Employees apply HERE Current Contingent Workers apply HERE". That seems like garbage. Actually after Required Skills list, there is "Preferred Skills: Current Employees apply HERE Current Contingent Workers apply HERE". That seems like placeholder. We should ignore that as boilerplate? Probably it's not real skill. We'll ignore.
Better to extract the list of required skills from the long comma-separated list after "Required Skills:" and before "Preferred Skills:"? The text: "Required Skills Strong interpersonal and oral and written communication skills, including the ability to explain complex technical and AI concepts to non-technical stakeholders, and experience interacting in, and presenting to, large groups and senior leaders.Strong technical aptitude and demonstrated experience with AI and ML technologies.Demonstrated ability to build trust and influence cross-functional stakeholders and drive complex compliance initiatives across a global organization.Established and effective business counseling skills, rooted in deep subject matter expertise in the relevant guidance, policies, codes, and regulations, as well as their application to business objectives, initiatives, and processes.Demonstrates a practical, analytical, and collaborative approach to problem-solving.Ability to develop strong working relationships with key leaders across the organization, including within our company's Research Laboratories, Human Health, Animal Health, and across global support functions.True “team player” mindset with the ability to integrate seamlessly into a cohesive global team.Sound judgment founded on strong ethical values and compliance principles, demonstrated through timely and disciplined decision making. Required Skills: Compliance Activities, Compliance Activities, Compliance Policies, Compliance Program Development, Compliance Reporting, Controls Management, Data Privacy, Data Protection Laws, Detail-Oriented, Ethical Compliance, Global Coordination, Governance Framework, Government Programs, Information Technology Compliance, Interpersonal Relationships, Metrics Analysis, Policy Governance, Policy Implementation, Privacy Laws, Privacy Regulations, Problem Identification, Professional Integrity, Regulatory Communications, Regulatory Compliance Audits, Regulatory Compliance Consulting {+ 8 more} Preferred Skills: Current Employees apply HERE Current Contingent Workers apply HERE"
So there are two parts: first a paragraph describing required skills (prose), then a list of skills (comma-separated). We'll treat the prose as part of Skills section maybe. Could also have a separate "Required Skills" heading but instruction says use headings like Skills. We'll just have a Skills section with
- for each skill item. We'll need to split the comma-separated list.
List: Compliance Activities, Compliance Activities (duplicate), Compliance Policies, Compliance Program Development, Compliance Reporting, Controls Management, Data Privacy, Data Protection Laws, Detail-Oriented, Ethical Compliance, Global Coordination, Governance Framework, Government Programs, Information Technology Compliance, Interpersonal Relationships, Metrics Analysis, Policy Governance, Policy Implementation, Privacy Laws, Privacy Regulations, Problem Identification, Professional Integrity, Regulatory Communications, Regulatory Compliance Audits, Regulatory Compliance Consulting {+ 8 more}
We should deduplicate? Probably keep as is but could remove duplicate "Compliance Activities". We'll keep one.
Also there is a note "{+ 8 more}" meaning there are more unspecified; we should not invent. We'll ignore that note.
Now Benefits: The posting says: "We offer a comprehensive package of benefits. Available benefits include medical, dental, vision healthcare and other insurance benefits (for employee and family), retirement benefits, including 401(k), paid holidays, vacation, and compassionate and sick days. More information about benefits is available at https://jobs.merck.com/us/en/compensation-and-benefits."
Thus we have Benefits section with list.
Pay: Salary range: "$173,200.00 - $272,600.00". Also mention annual bonus and long-term incentive. So we have Pay section.
Schedule: Not mentioned explicitly. There's "Travel Requirements: 10% Flexible Work Arrangements: Hybrid Shift: 1st - Day". That could be considered schedule? But instruction: only create Schedule section if posting actually states them. It does state Flexible Work Arrangements: Hybrid Shift: 1st - Day. That's schedule info. So we can include Schedule section with that info.
We should also include maybe "Location"? Not required.
We must not include Job ID/requisition numbers as headings; we can fold minor metadata into short
or drop it. We could include a short paragraph at top with Requisition ID? Probably drop it.
We must remove boilerplate: EEO, accommodation, etc. Also remove application instructions, links to apply, etc. Also remove "Search Firm Representatives" etc. Also remove "Employee Status: Regular Relocation: No relocation VISA Sponsorship: No Travel Requirements: 10% Flexible Work Arrangements: Hybrid Shift: 1st - Day Valid Driving License: No Hazardous Material(s): N/A Job Posting End Date: 09/19/2026". We'll keep travel requirements and flexible work arrangements as schedule.
Now craft HTML.
Structure:
About the role
... prose ...
Responsibilities
- ...
...
Qualifications
- ...
...
Skills
- ...
...
Benefits
- ...
...
Pay
... maybe include bonus info.
Schedule
... flexible work arrangements, travel, shift.
We need to ensure we don't create empty sections.
Now extract prose for About the role:
"Our Global Privacy and Digital Trust Program is grounded in organizational accountability, responsible data stewardship, consistent global practices and standards, and ongoing oversight to ensure we adapt to evolving regulatory expectations as technology and the business continue to change. The Director, Digital Compliance, will hold a leadership role in the Global Privacy and Digital Trust Office, reporting directly to the Chief Privacy and Digital Trust Officer. The role will help enable the compliant and responsible adoption of emerging technologies and digital solutions across our organization. This role will work in close partnership with Legal and International Legal & Compliance and serve as a trusted advisor to IT, Research and Development Division, Human Health, Animal Health, Procurement, and HR to provide practical, solutions-oriented compliance guidance related to transformative technologies, including AI, advanced analytics, digital health solutions, connected platforms, and data-driven business initiatives."
That's good.
Responsibilities bullet points from "Key Responsibilities" list:
- Collaborate with IT and other key stakeholders to create and execute a comprehensive governance and communication program for AI compliance.
- Support the design and implementation of next-generation AI Governance, including developing and maintaining AI policies, standards, and procedures, evolving AI risk assessments (e.g., triage design, risk tiering, domain-specific assessment frameworks, automation, and streamlined decision workflows), supporting third-party AI due diligence, and implementing AI incident reporting processes.
- Lead the compliance team guiding the implementation of technical controls for teams building agentic AI solutions, including human-in-the-loop patterns, tool access controls, retrieval and grounding practices, logging, monitoring, token and data minimization, and incident response playbooks.
- Provide strategic guidance on the responsible development, procurement and/or deployment of AI-enabled technologies across the organization.
- Translate complex legal and regulatory requirements into actionable, operational guidelines for technical and business teams.
- Monitor emerging AI regulations, industry standards, and internal policy requirements and partner with stakeholders to implement appropriate controls and mitigation measures.
- Represent AI compliance on internal steering committees, divisional governance committees, and project teams.
- Build and maintain strong partnerships with internal and external stakeholders to foster a culture of responsible innovation and accountability.
Qualifications bullet points:
- B.A./B.S. required; advanced degree in law, privacy, digital technologies, or public policy preferred.
- 10+ years of experience in compliance, privacy, legal, regulatory affairs, digital governance, or related functions, preferably in a pharmaceutical, life sciences, healthcare, or highly regulated environment.
- Demonstrated experience leading complex, cross-functional governance programs.
- Strong understanding of data protection laws, data governance, emerging AI regulations and governance, and risk management principles.
- Proven experience counseling on AI systems from a compliance perspective, including risk assessment review, auditability, transparency obligations, and lifecycle governance.
- CIPP/E/US/CIPM, AIGP, or other AI certification preferred.
Skills: we have prose paragraph describing required skills (the first part). Could incorporate that as prose under Skills heading, plus list.
But we might split: Skills heading with for the prose description, then
for the list.
Prose: "Strong interpersonal and oral and written communication skills, including the ability to explain complex technical and AI concepts to non-technical stakeholders, and experience interacting in, and presenting to, large groups and senior leaders. Strong technical aptitude and demonstrated experience with AI and ML technologies. Demonstrated ability to build trust and influence cross-functional stakeholders and drive complex compliance initiatives across a global organization. Established and effective business counseling skills, rooted in deep subject matter expertise in the relevant guidance, policies, codes, and regulations, as well as their application to business objectives, initiatives, and processes. Demonstrates a practical, analytical, and collaborative approach to problem-solving. Ability to develop strong working relationships with key leaders across the organization, including within our company's Research Laboratories, Human Health, Animal Health, and across global support functions. True “team player” mindset with the ability to integrate seamlessly into a cohesive global team. Sound judgment founded on strong ethical values and compliance principles, demonstrated through timely and disciplined decision making."
Then list of specific skills.
We'll deduplicate "Compliance Activities". Also remove the "{+ 8 more}" note.
List items:
- Compliance Activities
- Compliance Policies
- Compliance Program Development
- Compliance Reporting
- Controls Management
- Data Privacy
- Data Protection Laws
- Detail-Oriented
- Ethical Compliance
- Global Coordination
- Governance Framework
- Government Programs
- Information Technology Compliance
- Interpersonal Relationships
- Metrics Analysis
- Policy Governance
- Policy Implementation
- Privacy Laws
- Privacy Regulations
- Problem Identification
- Professional Integrity
- Regulatory Communications
- Regulatory Compliance Audits
- Regulatory Compliance Consulting
Now Benefits bullet list:
- medical, dental, vision healthcare and other insurance benefits (for employee and family)
- retirement benefits, including 401(k)
- paid holidays
- vacation
- compassionate and sick days
We could combine first item as "medical, dental, vision healthcare and other insurance benefits (for employee and family)". Keep as one.
Pay section: include salary range and bonus info.
Prose: "The salary range for this role
for prose. Remove boilerplate, navigation, EEO, etc. Keep substantive info. We need to parse the job description. Key sections: - About the role: The first paragraph(s) describing Global Privacy and Digital Trust Program, role description, reporting, purpose, partnership. That's prose. - Responsibilities: List of key responsibilities bullet points. - Qualifications: bullet list of qualifications (education, experience, etc.) - Skills: bullet list of required skills (maybe separate required and preferred? The posting includes "Required Skills" and "Preferred Skills" sections. We can combine into Skills section? The instruction: Use headings for section headings like Skills. We can have Skills heading and list required skills. Preferred skills maybe also under Skills? Could separate but we can include both under Skills heading as list. However we need to avoid filler. The posting includes "Required Skills: Compliance Activities, ..." a long list of skills separated by commas. Also "Preferred Skills: Current Employees apply HERE ..." Actually that seems like a misinterpretation: The posting includes "Preferred Skills: Current Employees apply HERE Current Contingent Workers apply HERE". That seems like garbage. Actually after Required Skills list, there is "Preferred Skills: Current Employees apply HERE Current Contingent Workers apply HERE". That seems like placeholder. We should ignore that as boilerplate? Probably it's not real skill. We'll ignore. Better to extract the list of required skills from the long comma-separated list after "Required Skills:" and before "Preferred Skills:"? The text: "Required Skills Strong interpersonal and oral and written communication skills, including the ability to explain complex technical and AI concepts to non-technical stakeholders, and experience interacting in, and presenting to, large groups and senior leaders.Strong technical aptitude and demonstrated experience with AI and ML technologies.Demonstrated ability to build trust and influence cross-functional stakeholders and drive complex compliance initiatives across a global organization.Established and effective business counseling skills, rooted in deep subject matter expertise in the relevant guidance, policies, codes, and regulations, as well as their application to business objectives, initiatives, and processes.Demonstrates a practical, analytical, and collaborative approach to problem-solving.Ability to develop strong working relationships with key leaders across the organization, including within our company's Research Laboratories, Human Health, Animal Health, and across global support functions.True “team player” mindset with the ability to integrate seamlessly into a cohesive global team.Sound judgment founded on strong ethical values and compliance principles, demonstrated through timely and disciplined decision making. Required Skills: Compliance Activities, Compliance Activities, Compliance Policies, Compliance Program Development, Compliance Reporting, Controls Management, Data Privacy, Data Protection Laws, Detail-Oriented, Ethical Compliance, Global Coordination, Governance Framework, Government Programs, Information Technology Compliance, Interpersonal Relationships, Metrics Analysis, Policy Governance, Policy Implementation, Privacy Laws, Privacy Regulations, Problem Identification, Professional Integrity, Regulatory Communications, Regulatory Compliance Audits, Regulatory Compliance Consulting {+ 8 more} Preferred Skills: Current Employees apply HERE Current Contingent Workers apply HERE" So there are two parts: first a paragraph describing required skills (prose), then a list of skills (comma-separated). We'll treat the prose as part of Skills section maybe. Could also have a separate "Required Skills" heading but instruction says use headings like Skills. We'll just have a Skills section with
- for each skill item. We'll need to split the comma-separated list.
List: Compliance Activities, Compliance Activities (duplicate), Compliance Policies, Compliance Program Development, Compliance Reporting, Controls Management, Data Privacy, Data Protection Laws, Detail-Oriented, Ethical Compliance, Global Coordination, Governance Framework, Government Programs, Information Technology Compliance, Interpersonal Relationships, Metrics Analysis, Policy Governance, Policy Implementation, Privacy Laws, Privacy Regulations, Problem Identification, Professional Integrity, Regulatory Communications, Regulatory Compliance Audits, Regulatory Compliance Consulting {+ 8 more}
We should deduplicate? Probably keep as is but could remove duplicate "Compliance Activities". We'll keep one.
Also there is a note "{+ 8 more}" meaning there are more unspecified; we should not invent. We'll ignore that note.
Now Benefits: The posting says: "We offer a comprehensive package of benefits. Available benefits include medical, dental, vision healthcare and other insurance benefits (for employee and family), retirement benefits, including 401(k), paid holidays, vacation, and compassionate and sick days. More information about benefits is available at https://jobs.merck.com/us/en/compensation-and-benefits."
Thus we have Benefits section with list.
Pay: Salary range: "$173,200.00 - $272,600.00". Also mention annual bonus and long-term incentive. So we have Pay section.
Schedule: Not mentioned explicitly. There's "Travel Requirements: 10% Flexible Work Arrangements: Hybrid Shift: 1st - Day". That could be considered schedule? But instruction: only create Schedule section if posting actually states them. It does state Flexible Work Arrangements: Hybrid Shift: 1st - Day. That's schedule info. So we can include Schedule section with that info.
We should also include maybe "Location"? Not required.
We must not include Job ID/requisition numbers as headings; we can fold minor metadata into short
or drop it. We could include a short paragraph at top with Requisition ID? Probably drop it. We must remove boilerplate: EEO, accommodation, etc. Also remove application instructions, links to apply, etc. Also remove "Search Firm Representatives" etc. Also remove "Employee Status: Regular Relocation: No relocation VISA Sponsorship: No Travel Requirements: 10% Flexible Work Arrangements: Hybrid Shift: 1st - Day Valid Driving License: No Hazardous Material(s): N/A Job Posting End Date: 09/19/2026". We'll keep travel requirements and flexible work arrangements as schedule. Now craft HTML. Structure:
About the role
... prose ...
Responsibilities
- ... ...
Qualifications
- ... ...
Skills
- ... ...
Benefits
- ... ...
Pay
... maybe include bonus info.
Schedule
... flexible work arrangements, travel, shift.
We need to ensure we don't create empty sections. Now extract prose for About the role: "Our Global Privacy and Digital Trust Program is grounded in organizational accountability, responsible data stewardship, consistent global practices and standards, and ongoing oversight to ensure we adapt to evolving regulatory expectations as technology and the business continue to change. The Director, Digital Compliance, will hold a leadership role in the Global Privacy and Digital Trust Office, reporting directly to the Chief Privacy and Digital Trust Officer. The role will help enable the compliant and responsible adoption of emerging technologies and digital solutions across our organization. This role will work in close partnership with Legal and International Legal & Compliance and serve as a trusted advisor to IT, Research and Development Division, Human Health, Animal Health, Procurement, and HR to provide practical, solutions-oriented compliance guidance related to transformative technologies, including AI, advanced analytics, digital health solutions, connected platforms, and data-driven business initiatives." That's good. Responsibilities bullet points from "Key Responsibilities" list: - Collaborate with IT and other key stakeholders to create and execute a comprehensive governance and communication program for AI compliance. - Support the design and implementation of next-generation AI Governance, including developing and maintaining AI policies, standards, and procedures, evolving AI risk assessments (e.g., triage design, risk tiering, domain-specific assessment frameworks, automation, and streamlined decision workflows), supporting third-party AI due diligence, and implementing AI incident reporting processes. - Lead the compliance team guiding the implementation of technical controls for teams building agentic AI solutions, including human-in-the-loop patterns, tool access controls, retrieval and grounding practices, logging, monitoring, token and data minimization, and incident response playbooks. - Provide strategic guidance on the responsible development, procurement and/or deployment of AI-enabled technologies across the organization. - Translate complex legal and regulatory requirements into actionable, operational guidelines for technical and business teams. - Monitor emerging AI regulations, industry standards, and internal policy requirements and partner with stakeholders to implement appropriate controls and mitigation measures. - Represent AI compliance on internal steering committees, divisional governance committees, and project teams. - Build and maintain strong partnerships with internal and external stakeholders to foster a culture of responsible innovation and accountability. Qualifications bullet points: - B.A./B.S. required; advanced degree in law, privacy, digital technologies, or public policy preferred. - 10+ years of experience in compliance, privacy, legal, regulatory affairs, digital governance, or related functions, preferably in a pharmaceutical, life sciences, healthcare, or highly regulated environment. - Demonstrated experience leading complex, cross-functional governance programs. - Strong understanding of data protection laws, data governance, emerging AI regulations and governance, and risk management principles. - Proven experience counseling on AI systems from a compliance perspective, including risk assessment review, auditability, transparency obligations, and lifecycle governance. - CIPP/E/US/CIPM, AIGP, or other AI certification preferred. Skills: we have prose paragraph describing required skills (the first part). Could incorporate that as prose under Skills heading, plus list. But we might split: Skills heading withfor the prose description, then
- for the list.
Prose: "Strong interpersonal and oral and written communication skills, including the ability to explain complex technical and AI concepts to non-technical stakeholders, and experience interacting in, and presenting to, large groups and senior leaders. Strong technical aptitude and demonstrated experience with AI and ML technologies. Demonstrated ability to build trust and influence cross-functional stakeholders and drive complex compliance initiatives across a global organization. Established and effective business counseling skills, rooted in deep subject matter expertise in the relevant guidance, policies, codes, and regulations, as well as their application to business objectives, initiatives, and processes. Demonstrates a practical, analytical, and collaborative approach to problem-solving. Ability to develop strong working relationships with key leaders across the organization, including within our company's Research Laboratories, Human Health, Animal Health, and across global support functions. True “team player” mindset with the ability to integrate seamlessly into a cohesive global team. Sound judgment founded on strong ethical values and compliance principles, demonstrated through timely and disciplined decision making."
Then list of specific skills.
We'll deduplicate "Compliance Activities". Also remove the "{+ 8 more}" note.
List items:
- Compliance Activities
- Compliance Policies
- Compliance Program Development
- Compliance Reporting
- Controls Management
- Data Privacy
- Data Protection Laws
- Detail-Oriented
- Ethical Compliance
- Global Coordination
- Governance Framework
- Government Programs
- Information Technology Compliance
- Interpersonal Relationships
- Metrics Analysis
- Policy Governance
- Policy Implementation
- Privacy Laws
- Privacy Regulations
- Problem Identification
- Professional Integrity
- Regulatory Communications
- Regulatory Compliance Audits
- Regulatory Compliance Consulting
Now Benefits bullet list:
- medical, dental, vision healthcare and other insurance benefits (for employee and family)
- retirement benefits, including 401(k)
- paid holidays
- vacation
- compassionate and sick days
We could combine first item as "medical, dental, vision healthcare and other insurance benefits (for employee and family)". Keep as one.
Pay section: include salary range and bonus info.
Prose: "The salary range for this role