Director of Global Privacy and Compliance
Precision Medicine Group · Bethesda, MD · 1 mo ago
RemoteRemoteLegal$162k/yrFull-time
We need to output HTML fragment with sections: About the role? The posting includes description. We need to use for section headings: About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule. Only include sections when posting has real specific content. We have content for responsibilities (privacy program leadership, global ethics and compliance, risk management, regulatory engagement, training & culture, incident management, senior stakeholder management). We have qualifications and competencies (law degree, certifications, experience, knowledge, etc). We have benefits and pay: compensation range, bonus, health insurance, retirement savings, life insurance, disability, parental leave, PTO. Also schedule? Not mentioned. So we should not include Schedule section. Also maybe Skills? Could be derived from qualifications but we can include Skills if there is specific content. The posting mentions "Strong leadership, communication, and stakeholder management skills." Also "Fluent in English; additional languages a plus." That's skills. Could put under Skills section. But we also have Qualifications section. We need to decide: The instruction: "Prefer a few substantive sections over many thin ones." So we could combine Qualifications and Skills into one? But they ask to use headings for those specific names if we include them. We could include Qualifications and Skills separate if we have content. However we might avoid thin sections. Qualifications has substantial content; Skills maybe thin. Could merge skills into Qualifications. But they said use headings for those names if we include them. It's okay to omit Skills if not enough distinct content. We'll include About the role (intro paragraph), Responsibilities, Qualifications, Benefits, Pay. Possibly also include a short paragraph for meta data like Job ID? Not needed. We'll drop boilerplate.
We need to preserve ALL substantive information; do not invent or summarize away detail. Must keep all details. That's tough: we need to keep all bullet points etc. We'll need to convert lists into
for section headings: About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule. Only include sections when posting has real specific content. We have content for responsibilities (privacy program leadership, global ethics and compliance, risk management, regulatory engagement, training & culture, incident management, senior stakeholder management). We have qualifications and competencies (law degree, certifications, experience, knowledge, etc). We have benefits and pay: compensation range, bonus, health insurance, retirement savings, life insurance, disability, parental leave, PTO. Also schedule? Not mentioned. So we should not include Schedule section. Also maybe Skills? Could be derived from qualifications but we can include Skills if there is specific content. The posting mentions "Strong leadership, communication, and stakeholder management skills." Also "Fluent in English; additional languages a plus." That's skills. Could put under Skills section. But we also have Qualifications section. We need to decide: The instruction: "Prefer a few substantive sections over many thin ones." So we could combine Qualifications and Skills into one? But they ask to use headings for those specific names if we include them. We could include Qualifications and Skills separate if we have content. However we might avoid thin sections. Qualifications has substantial content; Skills maybe thin. Could merge skills into Qualifications. But they said use headings for those names if we include them. It's okay to omit Skills if not enough distinct content. We'll include About the role (intro paragraph), Responsibilities, Qualifications, Benefits, Pay. Possibly also include a short paragraph for meta data like Job ID? Not needed. We'll drop boilerplate.
We need to preserve ALL substantive information; do not invent or summarize away detail. Must keep all details. That's tough: we need to keep all bullet points etc. We'll need to convert lists into - . Ensure we keep all specifics.
Let's extract sections.
Intro: "We are seeking an experienced Director of Global Privacy and Compliance to lead the design, implementation, and oversight of Precision Medicine Group global privacy standards across multiple jurisdictions, supporting our mission in clinical research and pharmaceutical development. The role will also lead and support global ethics and compliance matters, including anti-bribery and anti-corruption, the U.S. Foreign Corrupt Practices Act (FCPA), applicable local anti-corruption laws, third-party compliance, conflicts of interest, ethics reporting and investigations, and related policies, training, monitoring, and risk assessments."
That's about the role.
Responsibilities: multiple bullet-like sentences. We'll break into list items.
List items from responsibilities:
- Lead the global privacy program, ensuring compliance with GDPR, US privacy laws, APAC privacy laws, LATAM privacy laws, and other applicable data protection regulations.
- Design, implement, and manage the company’s global privacy program, ensuring alignment with international regulations and corporate standards.
- Oversee privacy impact assessments, data breach response, and cross-border data transfer compliance.
- Direct a variety of initiatives relating to the development, implementation and monitoring of PMG’s Privacy Program. Examples are:
- Leading an enterprise-wide privacy risk assessments tailored to the company’s business activities and risks, including risk metrics and analysis
- Developing privacy programs, policies and procedures
- Developing, implementing and conducting privacy training programs
- Providing supervision and direction to the company’s Privacy Operations Manager with respect to privacy compliance matters
- Managing Precision Data Protection Officer (external DPO)
- Liaising as appropriate with key PMG internal and external legal, regulatory, finance, and other business units as well as US based legal department.
- Global Ethics and Compliance Lead and support PMG’s global ethics and compliance program, including program design, implementation, administration, monitoring, and continuous improvement.
- Serve as a subject matter resource for anti-bribery and anti-corruption (ABAC) compliance, including the FCPA, the UK Bribery Act, and other applicable global anti-corruption laws and regulations.
- Develop, implement, and maintain global ethics and compliance policies, procedures, controls, risk assessments, training, and communications, including those addressing conflicts of interest, gifts and entertainment, charitable contributions, sponsorships, government interactions, and third-party engagements.
- Manage or support risk-based due diligence, contracting, monitoring, and remediation for agents, consultants, vendors, suppliers, distributors, and other third parties.
- Manage or support the intake, assessment, investigation, documentation, escalation, and remediation of ethics and compliance concerns, including matters reported through the company’s reporting channels, in coordination with Legal, Human Resources, Internal Audit, Quality, and other stakeholders.
- Monitor changes in global ethics and compliance laws, regulations, and enforcement trends and advise the business on resulting obligations and appropriate risk mitigation measures.
- Develop and track ethics and compliance metrics, monitoring activities, and management reporting, and support periodic assessments of program effectiveness.
- Promote a culture of integrity, accountability, and speaking up throughout the organization.
- Providing supervision and direction to the company’s Compliance Operations Manager with respect to ethics and compliance matters
- Risk Management & Monitoring: Enterprise Risk Management (ERM) Lead the company’s global ERM process
- Conduct risk assessments and implement monitoring systems to identify and mitigate compliance and privacy risks.
- Report on compliance metrics and trends to senior leadership and the General Counsel.
- Regulatory Engagement Stay ahead of evolving global privacy and compliance regulations impacting PMG’s business. Serve as primary liaison with regulatory authorities on privacy and compliance matters.
- Training & Culture Help develop privacy training programs for employees globally.
- Foster a culture of integrity and accountability throughout the organization.
- Incident Management Oversee investigations into privacy and compliance breaches and ensure timely remediation.
- Coordinate with internal Quality, IT or legal team on corrective actions.
- Senior Stakeholder Management Developing a thorough understanding of and familiarity with PMG’s business, its people, services, markets, facilities, customers, and competitors in order to identify risk trends and formulate structures, strategies and advice accordingly
- Establishing a strong working relationship with management at all levels to encourage and continue the proactive use of in-house legal counsel
- Performing special assignments or projects, without significant supervision, as assigned by the General Counsel and Chief Compliance Officer
That's a lot. We'll keep them as list items.
Qualifications And Competencies: list items.
- Law degree or equivalent advanced degree; certification in compliance or privacy (e.g., CCEP, CIPP/E) preferred.
- 10+ years of experience in privacy, with at least 5 years in a leadership role within CRO, pharma, or life sciences.
- Deep knowledge of global data privacy regulations (GDPR, APAC laws, HIPAA).
- Demonstrated knowledge of global ethics and compliance requirements, including ABAC and FCPA compliance, third-party risk management, conflicts of interest, investigations, training, monitoring, and remediation.
- Experience designing, implementing, or operating privacy and ethics and compliance programs in the life sciences or another highly regulated industry preferred.
- Previous experience in a regional leadership role in the life sciences sector.
- Significant experience with privacy and compliance risk assessments and analysis methodologies and building and scaling global privacy programs.
- Strong leadership, communication, and stakeholder management skills.
- Fluent in English; additional languages a plus.
Benefits: list items from paragraph: "This role is also eligible for a discretionary annual bonus, health insurance, retirement savings benefits, life insurance and disability benefits, parental leave, and paid time off for sick leave and vacation, among other benefits."
We'll list: discretionary annual bonus, health insurance, retirement savings benefits, life insurance, disability benefits, parental leave, paid time off for sick leave and vacation.
Pay: compensation range: $162,000 USD - $225,000 USD. Also note about compensation range details but we should preserve all substantive info. The paragraph includes explanation about range estimate not adjusted for geographic differential, not typical to hire at top, etc. We should keep that info as prose under Pay section maybe. We'll include the range and the explanatory sentences.
We must not include boilerplate like EEO, recruitment fraud warning, privacy policy, etc. So we drop those.
Now produce HTML fragment with
headings and
for prose,
- for lists.
We need to ensure we don't repeat job title as heading. We'll not.
We'll output:
About the role
We are seeking an experienced Director of Global Privacy and Compliance to lead the design, implementation, and oversight of Precision Medicine Group global privacy standards across multiple jurisdictions, supporting our mission in clinical research and pharmaceutical development. The role will also lead and support global ethics and compliance matters, including anti-bribery and anti-corruption, the U.S. Foreign Corrupt Practices Act (FCPA), applicable local anti-corruption laws, third-party compliance, conflicts of interest, ethics reporting and investigations, and related policies, training, monitoring, and risk assessments.
Responsibilities
- Lead the global privacy program, ensuring compliance with GDPR, US privacy laws, APAC privacy laws, LATAM privacy laws, and other applicable data protection regulations.
- Design, implement, and manage the company’s global privacy program, ensuring alignment with international regulations and corporate standards.
- Oversee privacy impact assessments, data breach response, and cross-border data transfer compliance.
- Direct a variety of initiatives relating to the development, implementation and monitoring of PMG’s Privacy Program. Examples are:
- Leading an enterprise-wide privacy risk assessments tailored to the company’s business activities and risks, including risk metrics and analysis
- Developing privacy programs, policies and procedures
- Developing, implementing and conducting privacy training programs
- Providing supervision and direction to the company’s Privacy Operations Manager with respect to privacy compliance matters
- Managing Precision Data Protection Officer (external DPO)
- Liaising as appropriate with key PMG internal and external legal, regulatory, finance, and other business units as well as US based legal department.
- Global Ethics and Compliance Lead and support PMG’s global ethics and compliance program, including program design, implementation, administration, monitoring, and continuous improvement.
- Serve as a subject matter resource for anti-bribery and anti-corruption (ABAC) compliance, including the FCPA, the UK Bribery Act, and other applicable global anti-corruption laws and regulations.
- Develop, implement, and maintain global ethics and compliance policies, procedures, controls, risk assessments, training, and communications, including those addressing conflicts of interest, gifts and entertainment, charitable contributions, sponsorships, government interactions, and third-party engagements.
- Manage or support risk-based due diligence, contracting, monitoring, and remediation for agents, consultants, vendors, suppliers, distributors, and other third parties.
- Manage or support the intake, assessment, investigation, documentation, escalation, and remediation of ethics and compliance concerns, including matters reported through the company’s reporting channels, in coordination with Legal, Human Resources, Internal Audit, Quality, and other stakeholders.
- Monitor changes in global ethics and compliance laws, regulations, and enforcement trends and advise the business on resulting obligations and appropriate risk mitigation measures.
- Develop and track ethics and compliance metrics, monitoring activities, and management reporting, and support periodic assessments of program effectiveness.
- Promote a culture of integrity, accountability, and speaking up throughout the organization.
- Providing supervision and direction to the company’s Compliance Operations Manager with respect to ethics and compliance matters
- Risk Management & Monitoring: Enterprise Risk Management (ERM) Lead the company’s global ERM process
- Conduct risk assessments and implement monitoring systems to identify and mitigate compliance and privacy risks.
- Report on compliance metrics and trends to senior leadership and the General Counsel.
- Regulatory Engagement Stay ahead of evolving global privacy and compliance regulations impacting PMG’s business. Serve as primary liaison with regulatory authorities on privacy and
headings and
for prose,
- for lists.
We need to ensure we don't repeat job title as heading. We'll not.
We'll output:
About the role
We are seeking an experienced Director of Global Privacy and Compliance to lead the design, implementation, and oversight of Precision Medicine Group global privacy standards across multiple jurisdictions, supporting our mission in clinical research and pharmaceutical development. The role will also lead and support global ethics and compliance matters, including anti-bribery and anti-corruption, the U.S. Foreign Corrupt Practices Act (FCPA), applicable local anti-corruption laws, third-party compliance, conflicts of interest, ethics reporting and investigations, and related policies, training, monitoring, and risk assessments.
Responsibilities
- Lead the global privacy program, ensuring compliance with GDPR, US privacy laws, APAC privacy laws, LATAM privacy laws, and other applicable data protection regulations.
- Design, implement, and manage the company’s global privacy program, ensuring alignment with international regulations and corporate standards.
- Oversee privacy impact assessments, data breach response, and cross-border data transfer compliance.
- Direct a variety of initiatives relating to the development, implementation and monitoring of PMG’s Privacy Program. Examples are:
- Leading an enterprise-wide privacy risk assessments tailored to the company’s business activities and risks, including risk metrics and analysis
- Developing privacy programs, policies and procedures
- Developing, implementing and conducting privacy training programs
- Providing supervision and direction to the company’s Privacy Operations Manager with respect to privacy compliance matters
- Managing Precision Data Protection Officer (external DPO)
- Liaising as appropriate with key PMG internal and external legal, regulatory, finance, and other business units as well as US based legal department.
- Global Ethics and Compliance Lead and support PMG’s global ethics and compliance program, including program design, implementation, administration, monitoring, and continuous improvement.
- Serve as a subject matter resource for anti-bribery and anti-corruption (ABAC) compliance, including the FCPA, the UK Bribery Act, and other applicable global anti-corruption laws and regulations.
- Develop, implement, and maintain global ethics and compliance policies, procedures, controls, risk assessments, training, and communications, including those addressing conflicts of interest, gifts and entertainment, charitable contributions, sponsorships, government interactions, and third-party engagements.
- Manage or support risk-based due diligence, contracting, monitoring, and remediation for agents, consultants, vendors, suppliers, distributors, and other third parties.
- Manage or support the intake, assessment, investigation, documentation, escalation, and remediation of ethics and compliance concerns, including matters reported through the company’s reporting channels, in coordination with Legal, Human Resources, Internal Audit, Quality, and other stakeholders.
- Monitor changes in global ethics and compliance laws, regulations, and enforcement trends and advise the business on resulting obligations and appropriate risk mitigation measures.
- Develop and track ethics and compliance metrics, monitoring activities, and management reporting, and support periodic assessments of program effectiveness.
- Promote a culture of integrity, accountability, and speaking up throughout the organization.
- Providing supervision and direction to the company’s Compliance Operations Manager with respect to ethics and compliance matters
- Risk Management & Monitoring: Enterprise Risk Management (ERM) Lead the company’s global ERM process
- Conduct risk assessments and implement monitoring systems to identify and mitigate compliance and privacy risks.
- Report on compliance metrics and trends to senior leadership and the General Counsel.
- Regulatory Engagement Stay ahead of evolving global privacy and compliance regulations impacting PMG’s business. Serve as primary liaison with regulatory authorities on privacy and