Program Manager – Compliance

Jobtailor; Utrecht; On-site; EUR 65,000 - 90,000; Full time

Job summary

Medline is seeking a compliance professional to support the global program across EMEA, focusing on GDPR, risk assessments, policies, and third-party due diligence.

You will map data, maintain documentation, contribute to training, and collaborate across functions to strengthen compliance culture; travel up to 25%.

Qualifications

• Law degree and experience working as a lawyer are mandatory.
• Fluent English is required.
• 2–5 years of experience in compliance, law, government regulatory, or risk management roles.
• Demonstrated experience with GDPR and data-privacy compliance.
• Understanding of anti-bribery/anti-corruption controls, due diligence, and regulatory risk management.
• Strategic thinking and strong commercial awareness.
• Strong judgment in ambiguous or high-risk environments.
• High integrity, independence, credibility, professionalism, and accountability.
• Ability to influence stakeholders through well-reasoned recommendations.
• Ability to collaborate effectively across functions and cultures.
• Experience in healthcare, pharmaceutical, or medical-devices industries is a plus.

Responsibilities

• Support implementation and continuous improvement of Medline’s global compliance program across EMEA
• Assist with risk assessments and development of mitigation plans
• Review and maintain internal compliance policies, procedures, and guidance
• Support Third-Party Due Diligence for distributors, consultants, vendors, and NGOs
• Support GDPR compliance activities, including data-mapping, Privacy Impact Assessments, and documentation maintenance
• Assist with data-subject request handling and privacy-by-design practices
• Contribute to privacy awareness and training efforts
• Help develop and deliver compliance and privacy training materials
• Maintain documentation repositories, reporting logs, and communication archives
• Support enterprise awareness initiatives and compliance culture-building
• Assist in screening, onboarding, and monitoring Third-Party Intermediaries
• Review due-diligence findings, follow up on red flags, and ensure complete documentation
• Support review and approval workflows for sponsorships, grants, and charitable contributions

Skills

GDPR Compliance

Risk Management

Third-Party Due Diligence

Compliance Training

Stakeholder Influence

Cross-Functional Collaboration

Data Privacy

Education

Law degree

Tools

GAN

DocuSign

Screening Databases

Job description

• Support implementation and continuous improvement of Medline’s global compliance program across EMEA


• Assist with risk assessments and development of mitigation plans


• Review and maintain internal compliance policies, procedures, and guidance


• Support Third-Party Due Diligence for distributors, consultants, vendors, and NGOs


• Support GDPR compliance activities, including data-mapping, Privacy Impact Assessments, and documentation maintenance


• Assist with data-subject request handling and privacy-by-design practices


• Contribute to privacy awareness and training efforts


• Help develop and deliver compliance and privacy training materials


• Maintain documentation repositories, reporting logs, and communication archives


• Support enterprise awareness initiatives and compliance culture-building


• Assist in screening, onboarding, and monitoring Third-Party Intermediaries


• Review due-diligence findings, follow up on red flags, and ensure complete documentation


• Support review and approval workflows for sponsorships, grants, and charitable contributions

Requirements

• Law degree and experience working as a lawyer are mandatory


• Fluent English is required


• Willingness to travel up to 25% of working time


• 2–5 years of experience in compliance, law, government regulatory, or risk management roles


• Demonstrated experience with GDPR and data-privacy compliance


• Understanding of anti-bribery/anti-corruption controls, due diligence, and regulatory risk management


• Strategic thinking and strong commercial awareness


• Strong judgment in ambiguous or high-risk environments


• High integrity, independence, credibility, professionalism, and accountability


• Ability to influence stakeholders through well-reasoned recommendations


• Ability to collaborate effectively across functions and cultures


• Experience in healthcare, pharmaceutical, or medical-devices industries is a plus


• Familiarity with compliance tools such as GAN, DocuSign, and screening databases


• Experience supporting internal audits or investigations

Core Competencies

Demonstrates expertise in compliance program implementation, GDPR and data-privacy compliance, and risk management within the healthcare or pharmaceutical sectors. Capable of developing training materials and fostering a compliance culture while effectively collaborating across functions.

Highest-signal resume keywords

• Law Degree


• GDPR Compliance


• Risk Management


• Third-Party Due Diligence


• Compliance Training Development

ATS Optimization Keywords

Hard Skills

• Compliance Program Implementation


• Risk Assessment


• Data-Privacy Compliance


• Anti-Bribery Controls


• Regulatory Risk Management


• Documentation Maintenance


• Internal Audits


• Privacy Impact Assessments


• Data-Subject Request Handling


• Due Diligence

Soft Skills

• Strategic Thinking


• Strong Judgment


• Influencing Stakeholders


• Collaboration


• High Integrity

Industry Keywords

• Healthcare


• Pharmaceutical


• Medical Devices


• Compliance Culture


• Regulatory Compliance

Tools & Technologies

• GAN


• DocuSign


• Screening Databases