Data Protection Officer

F. Hoffmann-La Roche AG; United Kingdom; Remote; GBP 75,000 - 110,000; Full time

Job summary

Roche in Burgess Hill, United Kingdom is seeking an experienced Data Protection Officer (DPO) to lead our privacy compliance strategy. You will operate with statutory independence, advising the Senior Leadership Team and directing the local privacy framework.

You will line manage the Data Privacy Manager and serve as the main contact for regulators while overseeing DPIAs, risk management, and privacy governance across digital health initiatives.

Qualifications

• Must have proven track record delivering data privacy compliance frameworks within a complex organization.
• Deep knowledge of UK GDPR, EU GDPR and the Data Protection Act 2018.
• Experience leading privacy programs and advising senior leadership.

Responsibilities

• Lead the Local Privacy Office and drive privacy compliance strategy.
• Serve as primary advisor to SLT on privacy matters and data governance.
• Regulatory liaison with ICO and other data protection authorities.
• Oversee DPIAs, risk assessments, and data protection impact processes.
• Coordinate audits, internal reviews and compliance frameworks (ISO27001, DSPT).

Skills

Leadership experience

Communication skills

Risk analysis

Project management

Analytical mindset

Data privacy awareness

Education

Relevant Degree

CIPP certification or privacy qualification

Tools

ISO27001

CyberEssentials Plus

Job description

At Roche you can show up as yourself, embraced for the unique qualities you bring. Our culture encourages personal expression, open dialogue, and genuine connections, where you are valued, accepted and respected for who you are, allowing you to thrive both personally and professionally. This is how we aim to prevent, stop and cure diseases and ensure everyone has access to healthcare today and for generations to come. Join Roche, where every voice matters.

Position Job Title: Data Protection Officer (DPO)

Reports To: Director of Legal and Compliance (Senior Leadership Team)

Location: Burgess Hill, UK

About the Role

We are seeking an experienced, high-visibility Data Protection Officer (DPO) to lead our privacy compliance strategy and champion a strong data protection culture. Operating with complete statutory independence, you will serve as the primary advisor to the Senior Leadership Team (SLT), direct our local privacy framework, and oversee high-impact digital health and AI initiatives. You will lead the Local Privacy Office, line manage the Data Privacy Manager, and serve as our designated point of contact for regulators and data subjects.

Key Responsibilities

• Strategic Leadership & Independence: Operate with statutory independence to set the position of the Local Privacy Office, advise senior leadership, and promote data privacy at the highest management levels.
• Regulatory Oversight: Act as the formal, designated contact point for regulators (ICO and ROI Data Protection Commission) and data subjects. Manage formal inquiries and data subject requests.
• Risk Management & DPIAs: Provide risk-based guidance on high-impact technology, special category data, and digital health initiatives. Provide final sign-off on Data Protection Impact Assessments (DPIAs).
• Breach Response & Reporting: Solely authorize, oversee, and direct the reporting of personal data breaches to regulatory authorities and affected data subjects.
• Team & Framework Management: Line manage and mentor the Data Privacy Manager while coordinating the Local Privacy Office. Oversee compliance monitoring, internal audits, and frameworks (ISO27001, CyberEssentials Plus, DSPT).

Key Relationships

• Internal: Affiliate Legal & Compliance Department, Senior Leadership Team (SLT), Group Privacy stakeholders, Data Privacy Liaisons, and IT/Cybersecurity teams.
• External: Information Commissioner's Office (ICO), Data Protection Commission (ROI), data subjects, and trade bodies.

Qualifications & Experience

Essential Criteria

• Relevant Degree
• Proven track record delivering data privacy compliance frameworks within a complex organization.
• Deep knowledge of UK GDPR, EU GDPR, and the Data Protection Act 2018.
• Leadership experience managing teams, projects, and influencing matrix stakeholders.
• Experience with emerging technologies (e.g., AI), digital health, and information governance systems (e.g., ISO27001).
• Strong risk analysis, analytical, project management, and communication skills.

Desirable Criteria

• CIPP (Certified Information Privacy Professional) or recognized privacy qualification.

Core Competencies & Values

Roche Core Values: Integrity, Courage, and Passion.

Decision Making & Expertise: Independent judgment, commercial awareness, and healthcare/IT sector awareness.

Leadership & Collaboration: Ability to inspire, coach junior team members, navigate change, and foster open communication under pressure.

Who we are

A healthier future drives us to innovate. Together, more than 100000 employees across the globe are dedicated to advance science, ensuring everyone has access to healthcare today and for generations to come. Our efforts result in more than 26 million people treated with our medicines and over 30 billion tests conducted using our Diagnostics products. We empower each other to explore new possibilities, foster creativity, and keep our ambitions high, so we can deliver life-changing healthcare solutions that make a global impact. Let's build a healthier future, together.

The statements herein are intended to describe the general nature and level of work being performed by employees, and are not to be construed as an exhaustive list of responsibilities, duties, and skills required of personnel so classified. Furthermore, they do not establish a contract for employment and are subject to change at the discretion of Roche Products Ltd.

At Roche Products we believe diversity drives innovation and we are committed to building a diverse and flexible working environment. All qualified applicants will receive consideration for employment without regard to race, religion or belief, sex, gender reassignment, sexual orientation, marriage and civil partnership, pregnancy and maternity, disability or age. We recognise the importance of flexible working and will review all applicants’ requests with care. At Roche difference is valued and we are proud to be an equal opportunity employer where you are encouraged to bring your whole self to work.

We believe it's urgent to deliver medical solutions right now - even as we develop innovations for the future. We are passionate about transforming patients’ lives. We are courageous in both decision and action. And we believe that good business means a better world. That is why we come to work each day. We commit ourselves to scientific rigor, unassailable ethics, and access to medical innovations for all. We do this today to build a better tomorrow. We are proud of who we are, what we do, and how we do it. We are many, working as one across functions, across companies, and across the world. We are Roche.