Senior Legal Counsel, Data Privacy

embecta is a global medical device company with a 100-year legacy in insulin delivery and diabetes care. Driven by innovation, purpose, and a commitment to improving lives, we are expanding our portfolio of solutions to serve even more patients, healthcare providers, and communities around the world.

Why embecta?

Imagine the long legacy and global scale of an industry leader combined with the agility, speed, and entrepreneurial energy of a startup—that's embecta. We are evolving from a company with more than 100 years of experience in diabetes care into a broader medical supplies organization, helping more than 30 million people worldwide live their best lives through innovative solutions, partnerships, and the strength of our global team. At embecta, you are empowered to take ownership, bring your authentic self to work, and accelerate your career alongside inspiring leaders.

The Senior Legal Counsel, Global Privacyserves as the lead attorney for embecta's global privacy program, responsible for executing the company's privacy strategy and overseeing the design, implementation, maintenance, and continuous enhancement of privacy compliance processes worldwide. This role partners closely with stakeholders across the organization to ensure compliance with evolving privacy laws and regulations while enabling business growth and operational objectives. In addition, the position provides commercial legal support to embecta's Canadian business. 

This is a hybrid position on-site (3) days a week in Parsippany, New Jersey.

What You'll Be Doing

Data Privacy (70%):

• Lead the ongoing management and operation of embecta’s global privacy program and coordinate the activities of the Privacy Steering Committee in partnership with the Chief Ethics, Compliance and Privacy Officer.
• Provide practical, risk-based legal guidance regarding the application of privacy, data protection, and cybersecurity requirements to the company’s existing and proposed products, services, technologies, systems, and business processes.
• Work across functions to design, implement, maintain, and enhance privacy governance processes and operational controls, including processes relating to third-party privacy reviews, data subject access requests, data mapping and inventories, records of processing activities, data protection impact assessments, and privacy impact assessments.
• Lead the development and implementation of privacy-by-design standards and practices consistent with applicable legal, regulatory, and industry requirements.
• Promote awareness and understanding of privacy requirements through training, communications, guidance materials, and other educational initiatives.
• Develop and maintain a strong understanding of the company’s operations, products, systems, technologies, data practices, customers, end users, vendors, and privacy risk environment.
• Develop, implement, maintain, and update internal privacy policies, procedures, standards, and work instructions, as well as external privacy notices, website privacy statements, and cookie notices and banners.
• Develop and manage an annual privacy risk assessment process and coordinate the tracking and remediation of identified risks.
• Advise on privacy incidents and potential data breaches, including risk assessment, investigation, documentation, notification, remediation, and coordination with relevant internal stakeholders.
• Develop and refine privacy program metrics and reporting relating to incidents, breaches, data subject requests, risk assessments, training, and other program activities, and recommend appropriate program improvements.
• Develop and maintain template data processing agreements, business associate agreements, and similar privacy and data protection agreements.
• Support the Legal and Procurement teams in reviewing and negotiating privacy, cybersecurity, and data protection provisions in commercial agreements.

Commercial Legal Support (30%):

• Serve as a legal advisor to embecta’s Canadian business, providing practical, solutions-oriented legal support on a broad range of commercial matters.
• Review, draft, and negotiate commercial agreements, including group purchasing organization contracts, requests for proposals, sales agreements, service agreements, and distribution agreements.
• Advise business stakeholders on legal risks associated with commercial initiatives, sales and marketing activities, customer arrangements, and distribution matters.
• Partner with colleagues and business leadership to support compliance with applicable commercial, regulatory, employment, consumer protection, privacy, cybersecurity, and other legal requirements.

What We're Looking For

Required Qualifications

• JD required, along with 5+ years of legal experience, including demonstrated experience handling privacy matters. Must be licensed to practice law in at least one U.S. state.
• Demonstrated experience working with HIPAA/HITECH, GDPR, CCPA/CPRA, CAN SPAM/TCPA and existing or emerging global privacy laws and/or state privacy laws.
• Professionalism, discretion, and judgment through sound decision-making to obtain solutions through collaborative efforts across the company.
• Strong communication, and project management skills. Ability to drive change and implement new processes.
• Hands-on, willing to roll-up their sleeves and acts as a partner to the business.
• Thrives in a fast-paced environment, prioritizes and handles multiple tasks, and exhibits attention to detail.
• Experience with Microsoft Office is required.
• Willingness to travel up to 10%

Preferred Qualifications

• CIPP/US, CIPP/E and/or CIPM or other relevant privacy certification is highly desirable
• Knowledge of compliance risks and considerations related to healthcare sales and marketing activities, including interactions with healthcare professionals and customers and promotional activities is highly desirable
• Familiarity with OneTrust platform is a plus.

Competitive base salary based on experience and qualifications: $150,000-$225,000 (subject to variation depending on physical location).  

Posted salary ranges are provided in good faith. embecta reserves the right to adjust ranges depending on the selected candidate’s experience, qualifications, external market conditions, and internal equity considerations.   

Base pay is one component of the Total Rewards package at embecta, which also includes eligibility for an annual bonusand an annual LTI award. Benefits include medical, dental, vision, retirement savings plans, and paid time off. More details about our benefits programs can be found on our Careers page.   

#LI-KM1

embecta is an EqualOpportunity/Affirmative Action Employer.  We do not unlawfully discriminateon the basis of race, color, religion, age, sex, creed, national origin, ancestry, citizenship status, marital or domestic or civil union status, familial status, affectional or sexual orientation, gender identity or expression, genetics, disability, military eligibility or veteran status, or any other protected status.