Data Privacy Counsel

0547 Varex Imaging Manufacturing India Private Limited; Pune District; On-site; INR 2,800,000 - 4,200,000; Full time

Job summary

Varex Imaging is seeking a Data Privacy Counsel to support global compliance with data privacy regulations and local regulatory matters in India. You will advise on DPAs, DPIAs, data transfers, and privacy policies, collaborating with the Global DPO and cross-functional teams.

The role requires a law degree with at least 3 years of data privacy experience and familiarity with GDPR, DPDPA, and CCPA/CPRA. A strong focus on risk assessment, incident response, and regulatory coordination is

Qualifications

• Minimum of 3 years of legal experience with demonstrated expertise in data privacy law.
• Understanding and compliance with GDPR, DPDPA, CCPA/CPRA, and other data privacy laws.

Responsibilities

• Review, draft, and negotiate DPAs, data transfer agreements, and vendor privacy terms.
• Provide guidance on global and regional data privacy regulations to stakeholders.
• Advise on data collection, processing, retention, and subject rights management activities.
• Conduct Data Protection Impact Assessments (DPIAs) and risk assessments for high-risk processing.
• Coordinate with external counsel on regulatory inquiries and privacy-related investigations.

Skills

Legal experience

Data privacy knowledge

Negotiation skills

Education

Bachelor's degree in Law

Job description

Summary Our Data Privacy Counsel will play a critical role in providing legal support on data privacy compliance and regulatory matters. This legal position focuses on ensuring global compliance with data privacy regulations and providing legal guidance on local regulatory matters, fostering a culture of data protection and integrity. A minor part of the role will be dealing with local governmental, labour/ employment issues and commercial matters within our organization.

Job Description

Varex Imaging, headquartered in Salt Lake City, USA, is a leading innovator, developer, and manufacturer of X-ray imaging component solutions, which includes X-ray tubes, digital flat panel detectors, software, and other key components of X-ray imaging systems. With a 70+ year history of successful innovation, you will find our components in numerous medical, industrial, and security imaging applications worldwide. Let us start with making the invisible visible for you…We have started our India manufacturing operations with a brownfield setup and are just a step away from establishing our own greenfield manufacturing setup. For this new and exciting chapter of Varex, we are looking for highly motivated people to help us to succeed in our business operations in India. We are looking for a Data Privacy Counsel who will play a critical role in providing legal support on data privacy compliance, regulatory matters, and some contract matters within our global organization. This legal position involves ensuring compliance with global data privacy regulations, providing legal guidance on local regulatory and commercial matters, close collaboration with our Global Data Privacy Officer, and fostering a culture of data protection and integrity.

Main Duties and Responsibilities

• Review, negotiate, and draft data processing agreements (DPAs), data transfer agreements (including Standard Contractual Clauses and Transfer Impact Assessments), vendor data privacy terms, and commercial contracts with data privacy implications to ensure legal compliance and risk mitigation


• Provide legal advice and strategic guidance on compliance with global and regional data privacy regulations, including GDPR, DPDPA (India), CCPA/CPRA, HIPAA, and emerging AI-specific regulations, ensuring organizational alignment with evolving legal requirements


• Advise business stakeholders, product teams, and functional departments on the legal implications and compliance requirements for data collection, processing, sharing, retention, and subject rights management activities


• Conduct comprehensive legal risk assessments and Data Protection Impact Assessments (DPIAs) for data processing activities, new technologies, AI systems, cross-border data transfers, and high-risk processing operations to identify and mitigate privacy risks


• Monitor, analyse, and interpret changes in data privacy laws and regulatory guidance across multiple jurisdictions, assess business impact, and provide actionable recommendations to leadership and cross-functional teams


• Provide legal guidance on data breach response, including notification obligations under applicable laws, regulatory reporting requirements, and coordination with the incident response team to ensure timely and compliant breach management


• Coordinate with external legal counsel on complex regulatory inquiries, enforcement actions, supervisory authority communications, and cross-border legal matters requiring specialized expertise


• Draft, review, and maintain privacy policies, privacy notices, cookie policies, data subject rights procedures, and other privacy-related legal documentation to ensure accuracy, completeness, and regulatory compliance

Minor Duties

• Coordinate and handle routine governmental filings, regulatory registrations, and administrative matters as needed


• Provide initial legal guidance on employment-related matters and coordinate with HR and external employment counsel on local labour law compliance issues


• Review standard commercial contracts for general legal terms, escalating complex commercial matters to appropriate legal resources

Your profile

• Bachelor's degree in Law; additional certification in data privacy (CIPP/E, CIPP/A, CIPM, or equivalent) beneficial


• Minimum of 3 years of legal experience with demonstrated expertise in data privacy law


• Understanding and compliance with data protection regulations such as GDPR (General Data Protection Regulation), DPDPA (Data Protection and Privacy Act), CCPA/CPRA (California Consumer Privacy Act/California Privacy Rights Act), and other relevant data privacy laws.


• Knowledge in AI Risk Governance, Data Protection Impact Assessment, and Data Subjects Rights Management.


• Experience with Data Processing Agreement review, Risk Assessment and Management, Compliance Management, and Third Party Risk Assessment.


• Experience in a global company preferred


• Strong written and oral communication as well as negotiation skills.


• Attention to detail and ability to work independently.


• Knowledge of data privacy frameworks, compliance processes, and tools


• Excellent communication and interpersonal skills.


• Collaborative team player with a positive demeanour

Time Type: Full time Job Type: Regular Work Shift: N/A Pay Rate Type: Salary

All qualified applicants will receive consideration for employment without regard to race, sex, color, religion, sexual orientation, gender identity, national origin, protected veteran status, or on the basis of disability.

Life at Varex Imaging

Varex Imaging Corporation is a leading innovator, developer, and manufacturer of X-ray imaging component solutions, which includes X-ray tubes, digital flat panel detectors, software, and other key components of X-ray imaging systems. With a 50+ year history of successful innovation, you will find our components in countless medical, industrial, and security imaging applications worldwide. Our mission states that through the talent of our people and vision of customers, we help improve and save lives throughout the world by making the invisible visible. Our values of Excecution, People, Integrity, and Collaboration are foundational to our success in upholding our mission. We cannot make the invisible visible and uphold our mission without our EPIC employees, who deliver cutting edge technology globally, consistently pursue the highest quality standards, engage in a diverse and ethical workforce, inspire innovation, and showcase a customer mindset. We strive every day to make a difference in the lives of both our customers and theirs. At Varex, our employees’ success is our success. Come and learn more! Visit www.VarexImaging.com