Sr. Corporate Counsel

Emmess Services; Bengaluru; On-site; INR 2,500,000 - 4,500,000; Full time

Job summary

Emmess Services in Bengaluru, India, seeks a Senior Counsel, Privacy, to support the company's global privacy program. Based in India, you will advise colleagues on privacy matters and work with the Legal team on contracting, data incident management, and DPAs/DUAs.

You will lead reviews of SOPs, monitor regulatory developments (GDPR, local laws), conduct privacy training, maintain processing records, and collaborate across Information Security, Compliance, HR, and business units to embed

Qualifications

• LL.B./J.D. or equivalent law degree and eligible to practice in India.
• 7–10 years of relevant legal experience in data privacy and security.
• Experience handling data incidents and investigations.
• Experience negotiating DPAs/DUAs and privacy contract terms.
• Experience advising on privacy matters in global organizations.
• Strong analytical, communication, and cross-functional collaboration skills.

Responsibilities

• Support development and administration of the global privacy program.
• Review and update data privacy and security SOPs to align with laws.
• Lead and support data incident management and investigations.
• Advise on privacy questions, data mapping, retention, cross-border transfers.
• Negotiate and draft DPAs/DUAs with sponsors, vendors, sites.
• Monitor regulatory developments and advise leadership.
• Help develop privacy training and maintain privacy records.
• Collaborate with Information Security, Compliance, HR, and business units.
• Other duties as assigned by Chief Legal Officer/Chief Privacy Officer.

Skills

Privacy law

Contract review

Data mapping

Regulatory interpretation

Cross-functional collaboration

Education

LL.B./J.D. or equivalent

Tools

MS Office

Job description

The Senior Counsel, Privacy, will be based in India and reporting to the Chief Legal Officer. This role supports the Companys global privacy program, advises colleagues across the business on privacy matters, and works closely with the Legal team on the privacy and security aspects of the Companys contracting activity, including data incident management, review of data privacy and security SOPs, and negotiation of Data Processing Agreements (DPAs) and Data Use Agreements (DUAs).

Responsibilities

• Serves as a key member of the Companys global privacy team, supporting the development, implementation, and ongoing administration of the Companys global privacy program across the jurisdictions in which the Company operates.
• Conducts periodic review and assessment of the Companys data privacy and security standard operating procedures (SOPs) and related policies, and recommends and drafts updates to ensure continued alignment with applicable law (e.g., GDPR, Indias Digital Personal Data Protection Act, HIPAA, U.S. state privacy laws) and industry best practice.
• Leads and supports data incident management and investigations, including intake, triage, root-cause analysis, remediation, and coordination of any required regulatory or contractual notifications, in partnership with Information Security and other stakeholders.
• Serves as a trusted advisor to colleagues across the Company on day-to-day privacy questions, including data mapping, privacy impact/risk assessments, retention, and cross-border data transfer issues.
• Advises Legal team colleagues on contractual matters relating to data privacy and security, including review and negotiation of privacy and security terms in vendor, sponsor, and clinical trial-related agreements.
• Supports the negotiation, drafting, and review of Data Processing Agreements (DPAs) and Data Use Agreements (DUAs) with sponsors, vendors, sites, and other third parties.
• Monitors legal and regulatory developments affecting global data privacy and security, and advises the Chief Legal Officer and business leadership on their impact to Company operations.
• Assists in developing and delivering privacy training and awareness materials for employees and relevant stakeholders.
• Supports maintenance of the Companys privacy compliance records, including records of processing activities (ROPA), data inventories, and privacy risk registers.
• Collaborates with Information Security, Compliance, HR, and business unit stakeholders on privacy-by-design and other cross-functional privacy initiatives.
• Other duties as assigned by the Chief Legal Officer/Chief Privacy Officer.

Qualifications

• LL.B./J.D. or equivalent law degree; qualified to practice law in India (or another relevant jurisdiction) and in good standing
• Minimum of 7-10 years of relevant legal experience, with substantial experience in data privacy and security law
• Experience handling data incident management and investigations
• Experience negotiating and drafting Data Processing Agreements (DPAs), Data Use Agreements (DUAs), and related privacy and security contract terms
• Experience advising on privacy matters in a global organization; experience in a contract research organization, life sciences, healthcare, or technology company preferred
• KSA Vision and Strategy: Understands the Companys global privacy program and how it supports the Companys broader business and compliance strategy. Helps translate privacy program objectives into practical guidance and support at the operational level within the Legal department and business units.
• Problem Solving: Demonstrates strong problem-solving and analytical skills, combined with sound judgment, in resolving privacy, data incident, and contractual matters.
• Oversight: Exercises diligent oversight of assigned privacy matters, data incidents, and DPA/DUA negotiations, escalating to the Chief Legal Officer/Chief Privacy Officer as appropriate.
• Metrics: Tracks and reports relevant metrics (e.g., data incident response times, DPA/DUA turnaround times, SOP review status) to support the effectiveness of the global privacy program.
• Culture: Exemplifies Company values in all actions and behavior, and helps promote a culture of privacy and data protection awareness across the organization.
• Credibility and Integrity: Develops credibility with colleagues and business partners as a knowledgeable and responsive privacy resource; demonstrates impeccable integrity.
• Continuous Improvement/Change Management: Continually assesses the effectiveness of privacy SOPs, templates, and processes, and recommends improvements as needed. Brings new ideas and practical solutions to drive efficiency and quality for internal stakeholders.
• Communication: Communicates effectively, and across time zones, with colleagues, the Legal team, and business stakeholders globally. Stays informed of, and communicates, relevant privacy and regulatory developments in a clear and supportive manner.
• Demonstrated proficiency in MS Office suite
• Strong working knowledge of global data privacy and security laws and frameworks (e.g., GDPR, Indias Digital Personal Data Protection Act, HIPAA, U.S. state privacy laws)
• Attention to detail and strong analytical and organizational skills
• Ability to manage multiple matters and competing priorities in a fast-paced, global environment
• Strong problem-solving skills with a demonstrated ability to work collaboratively across functions and geographies
• Excellent written and oral communication skills, including the ability to communicate clearly with colleagues at all levels and in different regions/time zones
• Sound judgment and ability to work independently with appropriate escalation