Data Privacy Officer, Counsel

Job Title: Data Privacy Officer, Counsel

Location: Cambridge, MA, Morristown, NJ

Ready to push the limits of what’s possible? Join Sanofi in one of our corporate functions and you can play a vital part in the performance of our entire business while helping to make an impact on millions around the world.

We’re an R&D-driven, AI-powered biopharma company committed to improving people’s lives and delivering compelling growth. Our deep understanding of the immune system – and innovative pipeline – enables us to invent medicines and vaccines that treat and protect millions of people around the world. Together, we chase the miracles of science to improve people’s lives.

• Serve as internal Privacy Counsel and Privacy Officer for the US market
• Expert knowledge of data protection, information security, breach notification, data privacy policies and procedures, in compliance with GDPR, HIPAA, current State Privacy Laws in the US.
• Conduct data privacy impact assessments for projects/products within scope.
• Manage privacy and breach requirements including investigation, reporting, and remediation in accordance with regulatory requirements.
• Liaise with regulatory bodies and internal stakeholders to address any data privacy concerns or compliance issues.
• Provide training and support to Sanofi business unit teams on data privacy best practices and leading data privacy implementation of new state laws.
• Ensure documentation and records of data processing activities are maintained accurately for audit purposes

• Juris Doctorate (JD) degree from an accredited law school, preferably with a focus in data privacy, and a valid license to practice law in the US
• In depth knowledge of U.S. State and federal privacy laws/regulations (CCPA, HIPAA), data breach notification regulations and familiarity with AI regulations
• Legal, regulatory, and policy analytical ability and knowledge, including experience analyzing proposed laws or regulations relevant to information privacy
• Previous privacy/AI/breach notification/cybersecurity law, data loss prevention experience in a law firm
• Healthcare experience, specifically providing product counseling to Product Management in the pharma/biotech space
• Relevant privacy certifications (e.g., CIPP-US)
• Minimum of 5 years of legal experience.
• Strong Relationship‑building, collaboration and working across functionally.
• Excellent communication skills, both written and verbal, with the ability to convey complex legal concepts to non‑experts.
• Proficiency with Word, PowerPoint and other corporate standard software - required.

• Experience counseling pharma/biotech companies on FDA or other relevant governmental agencies on healthcare matters
• Experience counseling large enterprises on privacy compliance matters
• Experience with privacy compliance management software

• Excellent written and oral communication skills
• Team player with a commitment to developing strong collaborative relationships with legal colleagues, business stakeholders and cross‑functional teams
• Demonstrated ability to understand legal principles and compliance, as well as business requirements
• Commitment to proactively identifying opportunities for improvement and engaging with appropriate stakeholders to propose solutions
• Solutions‑oriented; business‑oriented
• Self‑motivated, able to work independently, reliable, responsive, and accountable to deliver results
• High level of professionalism; strong interpersonal skills
• Proven ability/interest in applying privacy principles across a broad range of subject matter areas
• Strong organizational skills and ability to handle multiple responsibilities and priorities simultaneously and still meet high quality and timeliness standards under pressure
• Willingness to flex job responsibilities and learn new areas
• Ability to work collaboratively in cross‑functional/multi‑disciplinary teams
• Sound judgment and commitment to ethical conduct

• Product Management experience
• Project Management experience
• Professional proficiency in speaking French
• AI law and/or knowledge of current state AI…