Evinova - Director, Data Privacy & Governance

AstraZeneca; España; Presencial; EUR 70.000 - 100.000; Jornada completa

Descripción de la vacante

A leading health-tech company is seeking a Director for Data Privacy & Governance in Barcelona, Spain. This role involves strategic oversight of privacy responsibilities and managing the Data Governance program within a growing global healthtech business. Candidates should have a legal background and significant experience in privacy law, particularly GDPR, and be comfortable navigating complex data protection environments.

Servicios

Competitive salary

Inclusive work environment

Opportunities for growth

Formación

• 10 years of experience in privacy law and/or Data Privacy Programs.
• Familiarity with US, China, and other local data privacy regulations.
• Experience in technology or life sciences sectors.

Responsabilidades

• Act as a central point of contact for data subjects and authorities.
• Ensure compliance with data protection and privacy laws.
• Develop and operationalize a data governance framework.

Conocimientos

Privacy law expertise

Knowledge of GDPR

Analytical skills

Interpersonal skills

Experience in Healthtech

Educación

Legal degree or qualifications

Descripción del empleo

Location

Barcelona, Spain (On-site) / 3 days working from the office or
Gothenburg, Sweden (On-site) / 3 days working from the office

Evinova is a health-tech business, accelerating the delivery of better health outcomes by propelling the life sciences sector forward in digital health, from the inside. Through our application of science-based expertise, evidence-led rigor, and human experience-driven insight, our digital solutions are deliberately designed so that everyone can reach better health outcomes together. Evinova is a health-tech business within the AstraZeneca Group.

Introduction to Role

The Evinova Director, Data Privacy & Governance provides both strategic oversight to meet Evinova\'s privacy responsibilities and practical daily privacy support to meet the demands of Evinova\'s growing global healthtech business and expanding customer base as well as be responsible for the Data Governance program emphasising Security, Privacy, and AI.

This role reports directly to the Evinova Head of Quality, Compliance, and Audit, working closely with the Cyber Security, Legal, Product, and Delivery teams.

This role will be the central point of contact for data subjects and supervisory authorities in relevant markets, including in the EU and Switzerland. In addition, this role is responsible for global horizon scanning and providing advice and oversight based upon strong subject matter expertise and manage the relationship with Evinova\'s external Data Protection Officer for cases that warrant it. Furthermore this role will help build out and maintain Evinova ISO 27701 controls and Statement of Applicability to obtain and maintain certification and ensure privacy aspects of Evinova customer audits are fully supported and may support privacy aspects of contract negotiations with new customers.

Accountabilities

Evinova representative for data subjects and supervisory authorities:

• Point of contact for supervisory authorities related to Evinova data processing activities and data subjects

• Maintain required licenses, registrations and other local regulatory requirements to enable compliant processing and transfer of personal data within the Evinova Group and among Evinova partners/vendors

• Partner with DPO for responses to subject access requests

• Ensure support to data protection impact assessments and serve as contact to authorities as required on data protection impact assessments and other privacy impact assessments

• Reporting of significant and/or serious breaches (whether requiring external notice or otherwise), including advice on remediation measure, related oversight and trend analysis

• Partner with Quality, Compliance, Cyber Security, Product and, Delivery to monitor compliance with applicable data protection and privacy laws and help develop a robust privacy training programme for the Evinova workforce and collaborating with key stakeholders from product, quality, compliance, IT and the Evinova Business, to fulfil his/her responsibilities and to foster a global privacy mindset across Evinova

• Horizon scanning for key jurisdictions globally, including China in consultation with legal, external counsel and local resources as needed

• Support privacy aspects of customer contract negotiations, including drafting of data processing agreements and appropriate international transfer mechanisms

• Develops and operationalizes data governance framework.

• Owns the catalogue of Data Domains and assigned accountable data owners

• Accountable for oversight and improvement of data governance maturity.

• Drives Evinova data culture and educate the importance of good information management principles to internal and external business stakeholders.

• Oversees of data usage in analytics, business intelligence, data science and AI solutions.

• Manages data retention requirements and oversees the execution

Crucial Skills/Experience

• Legal degree or qualifications with 10 years\' experience in privacy law and/or Data Privacy Programs.

• In-depth knowledge of GDPR, EU/EEA local data protection legislation, UK Privacy Act and UK GDPR, familiarity with US, China and other local data privacy regulations

• Significant experience and knowledge of privacy program elements and best practices/tools and Data Governance frameworks

• Significant experience in either the technology and/or life sciences sector, with prior experience supporting digital health products working for a Healthtech or SaaS solution provider

• Excellent analytical, written and oral communications skills

• Strong collaborative, partnering, and interpersonal skills, ability to influence across different levels and sectors of the organisation including at Board level

• High ethical standards, trustworthy, operating with absolute discretion

• Demonstrated ability to remain independent and objective while collaborating effectively with stakeholders

• Comfortable operating in ambiguity in a fast paced work environment

Date Posted

07-oct-2025

Closing Date

26-oct-2025

AstraZeneca embraces diversity and equality of opportunity. We are committed to building an inclusive and diverse team representing all backgrounds, with as wide a range of perspectives as possible, and harnessing industry-leading skills. We believe that the more inclusive we are, the better our work will be. We welcome and consider applications to join our team from all qualified candidates, regardless of their characteristics. We comply with all applicable laws and regulations on non-discrimination in employment (and recruitment), as well as work authorization and employment eligibility verification requirements.