Italy Privacy Officer – Strategy & Compliance

Sanofi; Milano; On-site; EUR 100,000 - 135,000; Full time

Job summary

Sanofi in Milano, Italy is seeking a Local Privacy Officer (LPO) to partner with leadership, oversee privacy risk management, and enable compliant data-driven innovation across the business. You will implement the privacy operating model, map data flows, adapt global procedures to Italian requirements, and act as a liaison with authorities while championing privacy-by-design.

This role calls for in-depth knowledge of GDPR and AI privacy rules, collaboration across global teams, and the ability

Qualifications

• In-depth knowledge of data privacy and AI regulations
• Experience in Healthcare/Life sciences is an advantage
• Experience in highly regulated environments
• Experience working in an international environment

Responsibilities

• Develop and maintain a comprehensive local privacy risk assessment framework that addresses business maturity and ownership, and promotes the effective implementation of the privacy operating model among leadership team members and key stakeholders
• Understand, map and become familiar with business strategy and activities to proactively support their deployment while mitigating privacy risks
• Appoint and lead the Local Privacy champions' network to implement in a proactive way privacy strategy and priorities
• Monitor and analyze local privacy regulations, AI regulatory developments, and enforcement trends and document & implement local variations of global procedures when required by local laws
• Contribute to global position papers, develop and maintain external network with public authorities and other privacy networks, represent Sanofi in industry advocacy efforts to enhance transparency and build trust with internal and external stakeholders
• Actively contribute to transformation initiatives impacting both the business the privacy operating model
• Implement privacy-by-design principles in both local and global projects, with a focus on emerging technologies, innovation, data security and data democratization
• In accordance with the Global Privacy maturity framework, provide periodic reports to map existing and emerging privacy risks
• Provide periodic reports to the Italy Leadership Team to map existing and emerging privacy risks, in accordance with the Global Privacy maturity framework
• Adapt global privacy templates and procedures to local requirements while maintaining consistency, including vendor management due diligence, oversight and monitoring
• Monitor and assess data sovereignty regulatory developments across jurisdictions relevant to Italy, including cross-border transfer requirements, and elevate identified risks to the relevant governance bodies
• Implement and promote Data Sovereignty by Design principles in local and regional projects, ensuring that data sovereignty risk screening is integrated into business transition and transformation design processes, in alignment with the Data Compass framework and the data transfer compliance routes
• Monitor and analyze AI regulatory developments, including the EU AI Act, and their intersection with data protection law (GDPR), to proactively identify and mitigate privacy risks arising from AI systems, automated decision-making (ADM), and profiling activities deployed locally or globally impacting data subjects in Italy
• Integrate AI and ADM risk considerations into the local privacy risk assessment framework, ensuring that high-risk AI systems and profiling activities are subject to appropriate Data Protection Impact Assessments (DPIAs) and, where required, prior consultation with the Garante per la protezione dei dati personali

Skills

English & Italian language skills

Privacy governance

Risk management

Stakeholder management

Education

Master's or Bachelor's degree (law or computer sciences)

Privacy qualification (CIPP/E, CIPM, AIGP)

Job description

Sanofi in Milano, Italy is seeking a Local Privacy Officer (LPO) to partner with leadership, oversee privacy risk management, and enable compliant data-driven innovation across the business. You will implement the privacy operating model, map data flows, adapt global procedures to Italian requirements, and act as a liaison with authorities while championing privacy-by-design.

This role calls for in-depth knowledge of GDPR and AI privacy rules, collaboration across global teams, and the ability