EMEA Privacy Counsel - Associate Director

Bristol Myers Squibb; Warszawa; Hybrid; PLN 327,000 - 397,000; Full time

Benefits offered by this job

Health insurance

Job summary

Bristol Myers Squibb seeks an experienced Associate Director, Privacy Law & Compliance (Regional Privacy Counsel) based in Warsaw to lead EMEA privacy strategy and advisory services, partnering with Commercial, IT and HR teams.

The role demands strong cross-border data transfer expertise, regulatory monitoring, and the delivery of privacy training, with hybrid work and at least 50% onsite presence in Poland.

Qualifications

• Law degree with bar license in at least one EMEA jurisdiction.
• Minimum 5–8 years of legal experience, with 5+ years in data privacy in the EMEA region.
• Deep expertise in three or more EMEA data privacy regimes (e.g., GDPR, UK GDPR, POPIA, UAE PDPL).
• Experience advising on cross-border data transfer mechanisms and international privacy frameworks.
• Prior life sciences/pharma or healthcare sector experience preferred.
• Strong negotiation skills for data processing and vendor agreements.
• Excellent English communication; additional EMEA language desirable.

Responsibilities

• EMEA Privacy Legal Advisor: act as expert on data privacy laws across EMEA jurisdictions (EU GDPR, UK GDPR, etc).
• Advise business partners on privacy risks and legal obligations region-wide.
• Collaborate with Director, Global Privacy Compliance to align regional program with global standards.
• Conduct PIAs and DPIAs; maintain RoPA for EMEA entities.
• Monitor regulatory developments and update internal policies and controls.
• Counsel on cross-border data transfers and review DPAs and vendor contracts.
• Develop and deliver region-specific privacy training for employees and contractors.
• Support privacy incident triage, investigation, and remediation with IT as needed.

Skills

Privacy law expertise

Regulatory compliance

Cross-border data transfers

Stakeholder advisory

Contract negotiations

English communication

Additional language

Education

Law degree (LLB, JD, or equivalent)

Job description

Bristol Myers Squibb seeks an experienced Associate Director, Privacy Law & Compliance (Regional Privacy Counsel) based in Warsaw to lead EMEA privacy strategy and advisory services, partnering with Commercial, IT and HR teams.

The role demands strong cross-border data transfer expertise, regulatory monitoring, and the delivery of privacy training, with hybrid work and at least 50% onsite presence in Poland.