Senior Legal Counsel, Data Privacy

About the role

embecta is a global medical device company with a 100‑year legacy in insulin delivery and diabetes care, evolving into a broader medical supplies organization serving over 30 million people worldwide. The Senior Legal Counsel, Global Privacy serves as the lead attorney for embecta’s global privacy program, overseeing the design, implementation, maintenance, and continuous enhancement of privacy compliance processes worldwide while also providing commercial legal support to the Canadian business. This is a hybrid position requiring on‑site work three days per week in Parsippany, New Jersey.

Responsibilities

• Lead the ongoing management and operation of embecta’s global privacy program and coordinate the activities of the Privacy Steering Committee in partnership with the Chief Ethics, Compliance and Privacy Officer.
• Provide practical, risk‑based legal guidance regarding the application of privacy, data protection, and cybersecurity requirements to the company’s existing and proposed products, services, technologies, systems, and business processes.
• Work across functions to design, implement, maintain, and enhance privacy governance processes and operational controls, including third‑party privacy reviews, data subject access requests, data mapping and inventories, records of processing activities, data protection impact assessments, and privacy impact assessments.
• Lead the development and implementation of privacy‑by‑design standards and practices consistent with applicable legal, regulatory, and industry requirements.
• Promote awareness and understanding of privacy requirements through training, communications, guidance materials, and other educational initiatives.
• Develop and maintain a strong understanding of the company’s operations, products, systems, technologies, data practices, customers, end users, vendors, and privacy risk environment.
• Develop, implement, maintain, and update internal privacy policies, procedures, standards, and work instructions, as well as external privacy notices, website privacy statements, and cookie notices and banners.
• Develop and manage an annual privacy risk assessment process and coordinate the tracking and remediation of identified risks.
• Advise on privacy incidents and potential data breaches, including risk assessment, investigation, documentation, notification, remediation, and coordination with relevant internal stakeholders.
• Develop and refine privacy program metrics and reporting relating to incidents, breaches, data subject requests, risk assessments, training, and other program activities, and recommend appropriate program improvements.
• Develop and maintain template data processing agreements, business associate agreements, and similar privacy and data protection agreements.
• Support the Legal and Procurement teams in reviewing and negotiating privacy, cybersecurity, and data protection provisions in commercial agreements.
• Ser