Senior Privacy Manager

Core Responsibilities include: • Deploy local Privacy Compliance Program adapted to specific China privacy regulations and Medtech sector needs. Ensures company compliance with China applicable privacy and cybersecurity laws, as well as all applicable Johnson and Johnson privacy and data protection policies and procedures. Align with related stakeholders. Advises executive and senior management team of their responsibilities and obligations and helps them develop a culture of compliance • Appointment and responsibility towards the authorities as the Personal Information protection officer of Medtech in charge of implementing, maintaining and monitoring the privacy compliance program for Medtech. • Handles Data subject access requests and response process in Medtech • Incidents, breaches and enforcement: o Processes complaints and implements remediations related to personal information processing and leakages • Notifies and reports to local authorities’ data breaches in a timely manner, acts as point of contact towards the authorities for Medtech in case of investigation and control. • Partner with Information Security team to establish internal control systems that prevents leakage, abuse, misuse of personal information and protects the confidentiality of personal information files. • Provide Daily base business privacy support for Janssen projects • Review projects involving collection of PI by JNJ with project owner: e.g Mobiles apps, digital assets, new educational platforms, digital engagement initiatives for HCPs, social media engagement, creation of CRM data base, data analytics initiatives. • Review data classification, compliance analysis, participate in internal compliance review processes with copy review of necessary stakeholders before digital asset launch, • Drafting necessary privacy notices, policies and consents, disclaimers, reflecting these requirements as part of the IT architecture of the system with support of JJT • Contract review: o Collaborates with procurement team to manage risks with third parties processing PI: review and negotiation of privacy exhibits and related contractual privacy provisions o Assists Law Dept and Procurement with regard to the review and recommendation of adequate Privacy language in contracts with hospitals, HCPs, third party service providers, patients ( ICF) as well as necessary contractual schemes to implement ( data sharing, data processing agreement, inter affiliated agreements..) • Assists business process owners with documenting and preparing privacy impact assessments. Develop local Training and Communication plan to LT and stakeholders, • Prepare and issue Training plan adapted to Medtech China needs • Participation in company’s sector compliance committee • Participation at local level in global initiatives (e.g Internal privacy day) Qualifications Requirements • 8 to 10 years’ experience working in privacy program management, internal audit, legal, compliance with healthcare or consumer industry background preferred. • Strong interpersonal, verbal and written communication and leadership skills. • Functional understanding and expertise of applicable Privacy laws and regulations • Experience with developing privacy policies and procedures. • Demonstrates excellent business judgment, ability to make decisions, and pragmatic approach to problem solving • Project Management skills, experience in rolling out compliance programs • Ability to establish relationships and communicate with all levels of J&J organization, external third parties, and to collaborate effectively with cross-functional teams across the enterprise. • Chinese native, English Fluency required Primary Location China-Shanghai-Shanghai- Organization Johnson & Johnson Medical Shanghai Ltd. (7055) Job Function Legal Requisition ID 2206061283W