Data Protection Officer

Roche; Burgess Hill; On-site; GBP 65,000 - 90,000; Full time

Job summary

Roche is seeking an experienced Data Protection Officer (DPO) to lead privacy compliance strategy and foster a strong data protection culture. You will report to the Director of Legal and Compliance and act as the primary advisor to the Senior Leadership Team, guiding the local privacy framework and high-impact digital health initiatives.

You will head the Local Privacy Office, line-manage the Data Privacy Manager, and serve as the liaison for regulators and data subjects, while ensuring

Qualifications

• Essential Criteria: Relevant Degree
• Essential Criteria: Proven track record delivering data privacy compliance frameworks
• Essential Criteria: Deep knowledge of UK GDPR, EU GDPR, and the Data Protection Act 2018
• Essential Criteria: Leadership experience managing teams, projects and stakeholders
• Essential Criteria: Experience with AI, digital health and information governance systems (ISO27001)
• Essential Criteria: Strong risk analysis, analytics, project management and communication skills

Responsibilities

• Strategic leadership with statutory independence to shape the Local Privacy Office
• Act as the formal contact point for regulators (ICO and ROI) and data subjects
• Provide risk-based guidance on high-impact technology and DPIAs and sign off DPIAs
• Authorize and direct reporting of personal data breaches to regulators and data subjects
• Mentor the Data Privacy Manager and oversee compliance monitoring, audits and ISO27001/CyberEssentials Plus frameworks

Skills

Leadership experience

UK GDPR knowledge

EU GDPR knowledge

Data governance

Project management

Communication skills

Risk analysis

Education

Relevant Degree

CIPP or privacy qualification

Tools

ISO27001

CyberEssentials Plus

Job description

At Roche you can show up as yourself, embraced for the unique qualities you bring. Our culture encourages personal expression, open dialogue, and genuine connections, where you are valued, accepted and respected for who you are, allowing you to thrive both personally and professionally. This is how we aim to prevent, stop and cure diseases and ensure everyone has access to healthcare today and for generations to come. Join Roche, where every voice matters.

The Position

Job Title: Data Protection Officer (DPO)

Reports To: Director of Legal and Compliance (Senior Leadership Team)

Location: Burgess Hill, UK

About The Role

We are seeking an experienced, high-visibility Data Protection Officer (DPO) to lead our privacy compliance strategy and champion a strong data protection culture. Operating with complete statutory independence, you will serve as the primary advisor to the Senior Leadership Team (SLT), direct our local privacy framework, and oversee high-impact digital health and AI initiatives.

You will lead the Local Privacy Office, line manage the Data Privacy Manager, and serve as our designated point of contact for regulators and data subjects.

Key Responsibilities

• Strategic Leadership & Independence: Operate with statutory independence to set the position of the Local Privacy Office, advise senior leadership, and promote data privacy at the highest management levels
• Regulatory Oversight: Act as the formal, designated contact point for regulators (ICO and ROI Data Protection Commission) and data subjects. Manage formal inquiries and data subject requests
• Risk Management & DPIAs: Provide risk-based guidance on high-impact technology, special category data, and digital health initiatives. Provide final sign-off on Data Protection Impact Assessments (DPIAs)
• Breach Response & Reporting: Solely authorize, oversee, and direct the reporting of personal data breaches to regulatory authorities and affected data subjects
• Team & Framework Management: Line manage and mentor the Data Privacy Manager while coordinating the Local Privacy Office. Oversee compliance monitoring, internal audits, and frameworks (ISO27001, CyberEssentials Plus, DSPT)

Key Relationships

Internal: Affiliate Legal & Compliance Department, Senior Leadership Team (SLT), Group Privacy stakeholders, Data Privacy Liaisons, and IT/Cybersecurity teams.

External: Information Commissioner's Office (ICO), Data Protection Commission (ROI), data subjects, and trade bodies.

Qualifications & Experience

Essential Criteria:

• Relevant Degree
• Proven track record delivering data privacy compliance frameworks within a complex organization
• Deep knowledge of UK GDPR, EU GDPR, and the Data Protection Act 2018
• Leadership experience managing teams, projects, and influencing matrix stakeholders
• Experience with emerging technologies (e.g., AI), digital health, and information governance systems (e.g., ISO27001)
• Strong risk analysis, analytical, project management, and communication skills

Desirable Criteria: CIPP (Certified Information Privacy Professional) or recognized privacy qualification.

Core Competencies & Values

Roche Core Values: Integrity, Courage, and Passion.

Decision Making & Expertise: Independent judgment, commercial awareness, and healthcare/IT sector awareness.

Leadership & Collaboration: Ability to inspire, coach junior team members, navigate change, and foster open communication under pressure.

Who we are

A healthier future drives us to innovate. Together, more than 100’000 employees across the globe are dedicated to advance science, ensuring everyone has access to healthcare today and for generations to come. Our efforts result in more than 26 million people treated with our medicines and over 30 billion tests conducted using our Diagnostics products. We empower each other to explore new possibilities, foster creativity, and keep our ambitions high, so we can deliver life-changing healthcare solutions that make a global impact.

Let’s build a healthier future, together.

The statements herein are intended to describe the general nature and level of work being performed by employees, and are not to be construed as an exhaustive list of responsibilities, duties, and skills required of personnel so classified. Furthermore, they do not establish a contract for employment and are subject to change at the discretion of Roche Products Ltd. At Roche Products we believe diversity drives innovation and we are committed to building a diverse and flexible working environment. All qualified applicants will receive consideration for employment without regard to race, religion or belief, sex, gender reassignment, sexual orientation, marriage and civil partnership, pregnancy and maternity, disability or age. We recognise the importance of flexible working and will review all applicants’ requests with care. At Roche difference is valued and we are proud to be an equal opportunity employer where you are encouraged to bring your whole self to work.