Data Privacy Counsel

Varex Imaging Corporation; Pune District; On-site; INR 1,800,000 - 3,200,000; Full time

Job summary

Varex Imaging in Pune, India, is seeking a Data Privacy Counsel to support global privacy compliance and local regulatory matters. You will work with the Global Data Privacy Officer to ensure proper data handling and governance across the organization, including some labour and government-related matters.

Key duties include drafting and negotiating DPAs and data transfer agreements, advising on GDPR, DPDPA, CPRA, and other laws, conducting DPIAs, and preparing privacy notices and policies to

Qualifications

• Bachelor of Laws with data privacy focus or certification preferred.
• Minimum 3 years of legal experience in data privacy.
• Experience with GDPR, DPDPA, CPRA and related laws.
• Knowledge of DPIA processes and data breach guidance.
• Strong communication, negotiation, and drafting skills.

Responsibilities

• Review, draft, and negotiate DPAs and data transfer agreements.
• Advise on global/regional data privacy regulations across the business.
• Guide on data collection, processing, sharing, retention, and subject rights.
• Conduct DPIAs for high-risk processing and cross-border transfers.
• Monitor regulatory updates and advise leadership.
• Provide breach notification guidance and incident coordination.
• Draft and maintain privacy policies and notices.
• Coordinate routine government filings and employment-related guidance.

Skills

Data privacy law

GDPR

DPA review

Contract negotiation

Regulatory compliance

DPIA

Cross-border data transfers

Education

LL.B.

Job description

Summary

Our Data Privacy Counsel will play a critical role in providing legal support on data privacy compliance and regulatory matters. This legal position focuses on ensuring global compliance with data privacy regulations and providing legal guidance on local regulatory matters, fostering a culture of data protection and integrity. A minor part of the role will be dealing with local governmental, labour / employment issues and commercial matters within our organization.

Job Description

Job Description

Varex Imaging, headquartered in Salt Lake City, USA, is a leading innovator, developer, and manufacturer of X-ray imaging component solutions, which includes X-ray tubes, digital flat panel detectors, software, and other key components of X-ray imaging systems. With a 70+ year history of successful innovation, you will find our components in numerous medical, industrial, and security imaging applications worldwide.

Let us start with making the invisible visible for you…We have started our India manufacturing operations with a brownfield setup and are just a step away from establishing our own greenfield manufacturing setup. For this new and exciting chapter of Varex, we are looking for highly motivated people to help us to succeed in our business operations in India.

We are looking for a Data Privacy Counsel who will play a critical role in providing legal support on data privacy compliance, regulatory matters, and some contract matters within our global organization. This legal position involves ensuring compliance with global data privacy regulations, providing legal guidance on local regulatory and commercial matters, close collaboration with our Global Data Privacy Officer, and fostering a culture of data protection and integrity.

Your role…

The primary purpose of this position is to support the Global Data Privacy Officer (GDPO) in building and strengthening the global data privacy program while providing legal support on local regulatory matters. This role involves collaborating with various departments to ensure that Varex Imaging’s data handling practices are in compliance with applicable data privacy laws and regulations, thereby safeguarding the privacy and security of personal and sensitive information across all operations. As a minor duty the role includes the handling of local governmental matters and procedures, labour issues and providing legal counsel on commercial agreements and local legal requirements.

Main Duties and Responsibilities:

• Review, negotiate, and draft data processing agreements (DPAs), data transfer agreements (including Standard Contractual Clauses and Transfer Impact Assessments), vendor data privacy terms, and commercial contracts with data privacy implications to ensure legal compliance and risk mitigation
• Provide legal advice and strategic guidance on compliance with global and regional data privacy regulations, including GDPR, DPDPA (India), CCPA/CPRA, HIPAA, and emerging AI-specific regulations, ensuring organizational alignment with evolving legal requirements
• Advise business stakeholders, product teams, and functional departments on the legal implications and compliance requirements for data collection, processing, sharing, retention, and subject rights management activities
• Conduct comprehensive legal risk assessments and Data Protection Impact Assessments (DPIAs) for data processing activities, new technologies, AI systems, cross-border data transfers, and high-risk processing operations to identify and mitigate privacy risks
• Monitor, analyse, and interpret changes in data privacy laws and regulatory guidance across multiple jurisdictions, assess business impact, and provide actionable recommendations to leadership and cross-functional teams
• Provide legal guidance on data breach response, including notification obligations under applicable laws, regulatory reporting requirements, and coordination with the incident response team to ensure timely and compliant breach management
• Coordinate with external legal counsel on complex regulatory inquiries, enforcement actions, supervisory authority communications, and cross-border legal matters requiring specialized expertise
• Draft, review, and maintain privacy policies, privacy notices, cookie policies, data subject rights procedures, and other privacy-related legal documentation to ensure accuracy, completeness, and regulatory compliance

Minor Duties:

• Coordinate and handle routine governmental filings, regulatory registrations, and administrative matters as needed
• Provide initial legal guidance on employment-related matters and coordinate with HR and external employment counsel on local labour law compliance issues
• Review standard commercial contracts for general legal terms, escalating complex commercial matters to appropriate legal resources

Your profile…

• Bachelor’s degree in Law; additional certification in data privacy (CIPP/E, CIPP/A, CIPM, or equivalent) beneficial
• Minimum of 3 years of legal experience with demonstrated expertise in data privacy law
• Understanding and compliance with data protection regulations such as GDPR (General Data Protection Regulation), DPDPA (Data Protection and Privacy Act), CCPA/CPRA (California Consumer Privacy Act/California Privacy Rights Act), and other relevant data privacy laws.
• Knowledge in AI Risk Governance, Data Protection Impact Assessment, and Data Subjects Rights Management.
• Experience with Data Processing Agreement review, Risk Assessment and Management, Compliance Management, and Third Party Risk Assessment.
• Experience in a global company preferred
• Strong written and oral communication as well as negotiation skills.
• Attention to detail and ability to work independently.
• Knowledge of data privacy frameworks, compliance processes, and tools
• Excellent communication and interpersonal skills.
• Collaborative team player with a positive demeanour

Time Type:

Full time

Job Type:

Regular

Work Shift:

N/A

Pay Rate Type:

Salary

All qualified applicants will receive consideration for employment without regard to race, sex, color, religion, sexual orientation, gender identity, national origin, protected veteran status, or on the basis of disability.