EMEA Privacy Law & Compliance Leader

Bristol Myers Squibb EU Policy; Warszawa; Hybrid; PLN 327,000 - 397,000; Full time

Benefits offered by this job

Hybrid work model

Job summary

Bristol Myers Squibb, based in Warsaw, seeks an experienced Associate Director, Privacy Law & Compliance (Regional Privacy Counsel) for the EMEA region. The role partners with Commercial, Medical Affairs, IT and HR to ensure privacy compliance and enable business innovation.

Required: law degree with license to practice, 5–8 years in privacy law within EMEA, and strong cross-border transfer expertise. Hybrid role with at least 50% onsite work in Warsaw.

Qualifications

• Law degree and license to practice law in at least one EMEA jurisdiction.
• 5–8 years of legal experience with focus on data privacy in EMEA.
• Expertise in multiple EMEA privacy regimes (GDPR, UK GDPR, etc.).
• Experience advising on cross-border data transfers and privacy frameworks.
• Prior life sciences/pharma experience preferred.
• Strong ability to navigate multi-jurisdictional privacy issues with pragmatism.

Responsibilities

• Serve as EMEA Privacy Legal Advisor on data privacy laws across jurisdictions.
• Advise business partners on privacy risks and obligations for initiatives.
• Ensure alignment of regional privacy program with global standards.
• Conduct PIAs and DPIAs and maintain RoPA for EMEA entities.
• Monitor regulatory developments and update policies and controls.
• Advise on cross-border data transfers and review DPAs and vendor contracts.
• Develop and deliver region-specific privacy training for employees and contractors.

Skills

Negotiation skills

Communication skills

English fluency

Education

Law degree

License to practice law

Job description

Bristol Myers Squibb, based in Warsaw, seeks an experienced Associate Director, Privacy Law & Compliance (Regional Privacy Counsel) for the EMEA region. The role partners with Commercial, Medical Affairs, IT and HR to ensure privacy compliance and enable business innovation.

Required: law degree with license to practice, 5–8 years in privacy law within EMEA, and strong cross-border transfer expertise. Hybrid role with at least 50% onsite work in Warsaw.