Data Privacy Professional

Siemens Healthineers; Bengaluru; On-site; INR 1,500,000 - 2,500,000; Full time

Job summary

Siemens Healthineers in Bengaluru, India is seeking a Data Privacy Professional to support the privacy program across MedTech initiatives. You will drive assessments, DSARs, breach response, ROPA, and privacy-by-design reviews, collaborating with cross-functional teams.

Qualified candidates have a degree in CS/IT and 5–8 years in privacy, with DCPP/CIPP/CIPM certifications as an added advantage. The role requires a proactive privacy advocate in a regulated healthcare tech environment.

Qualifications

• Possess degree in Computer Science or Information Technology.
• 5–8 years post-qualification experience, with at least 4 years in data privacy or protection.
• Experience in Medtech, Pharma, LifeScience or IT/ITES preferred.

Responsibilities

• Execute day-to-day privacy activities and embed privacy-by-design principles.
• Serve as point of contact for DP-related questions and respond promptly.
• Collaborate to document DP initiatives in the Healthineers Data Privacy (HDP) Register.
• Support RO P A completion and periodic reviews for quality.
• Lead fact-finding in privacy incidents and support data breach management.
• Assist vendor DP assessments and audits to ensure data protection across the supply chain.
• Bridge between business/functional teams and Data Privacy Officers.
• Review policies and training to identify areas for improvement.

Skills

Data privacy operations

DP compliance

Privacy by design

Data lifecycle management

Cross-functional collaboration

Education

Bachelor's degree in Computer Science or Information Technology

Data privacy certifications (DCPP, CIPP, CIPM)

Job description

Job Description:

Job Description - Data Privacy Professional

Role Objective: To support the implementation and operation of the company's data privacy program by assisting with privacy compliance, privacy risk management, and privacy governance activities across business operations, clinical studies, digital health solutions, and medical device initiatives. Help ensure compliance with applicable privacy laws and regulations, including GDPR and India's DPDPA, through execution of privacy assessments, data subject rights processes, data breach response activities, data processing record management, and privacy-by-design reviews.

Key Responsibilities:

• Execute day-to-day privacy activities, identify and elevate privacy risks, provide practical guidance to stakeholders, and help embed privacy-by-design principles into products, services, and business processes within the MedTech environment.
• Serve as the point of contact for business and functional stakeholders for DP related questions and address them effectively and promptly.
• Collaborate with businesses and functions to ensure data protection and privacy initiatives are well understood and accurately documented in the Healthineers Data Privacy (HDP) Register.
• Support business in completing Record of Processing Activities (ROPA), perform periodic reviews to ensure standard quality.
• Completing annual Data Privacy Assessment on behalf of relevant functions, performing spot checks where required.
• Driving fact finding in case of a data privacy incident and help support in data breach management process.
• Supports Vendor DP assessment, audits, and certifications as appropriate to ensure data protection across the supply chain.
• Act as bridge between business / function and Data Privacy Officer / Co-ordinator to ensure compliance with data privacy.
• Assist Data Privacy Officer/Co-ordinator on day-to-day privacy matters, guidance on data privacy agreements or implementation of data privacy compliance framework, data protection awareness and in responding to data protection and privacy-related queries.
• Review existing policies, processes, systems, controls, and training materials to identify areas where data protection practices can be improved.

Key Attributes & Competencies:

• Working and practical knowledge/experience of data privacy operations, data protection compliance policy & programmes and their implementation.
• Advanced understanding of data lifecycle management and privacy by design principles within IT systems and cloud environments.
• Excellent communication skill with ability to effectively collaborate with multiple cross functional teams

Qualifications & Experience:

• Degree in Computer Science, Information Technology or related fields. Legal training or qualifications or Data privacy certifications such as DCPP, CIPP, CIPM will be an added advantage.
• 5-8 years of post-qualification experience with min. 4 years in data privacy or protection functions preferably in Medtech, Pharma, LifeScience or IT/ITES Companies.

Requirements: