Associate Director, Customer Data Privacy & Consent Enablement

Associate Director, Customer Data Privacy & Consent Enablement

The Associate Director, Customer Data Privacy & Consent Enablement is a business‑side commercial operations role within the Commercialization AI Strategy & Analytics function, reporting to the Director, Global Consent & Data Privacy. This role is responsible for helping BMS translate evolving privacy, consent, and customer data requirements into practical commercial processes, data requirements, and system capabilities. The role serves as a bridge between Legal, Compliance, Marketing, Omnichannel, Patient Services, Field, Market Access, IT/BI&T, data product teams, and other commercial stakeholders to support compliant HCP and patient engagement across commercial channels.

The Associate Director is not a Legal or Compliance role. Instead, the role focuses on operational enablement: understanding commercial engagement initiatives, translating business and privacy needs into clear requirements, and helping ensure those requirements are embedded into workflows, platforms, data products, consent capabilities, and reporting processes.

• Translate privacy, consent, and customer data requirements into practical guidance, workflows, controls, and operational processes for commercial teams.
• Support the operational pull‑through of applicable privacy and consent requirements across HCP, patient, digital, omnichannel, and third‑party commercial data activities.
• Partner with Legal, Compliance, and Global Consent & Data Privacy to assess new or changing requirements and determine commercial impact.
• Help maintain operational readiness as privacy, consent, and customer data requirements evolve across applicable jurisdictions.
• Partner with Marketing and other commercial functions to understand engagement initiatives and translate business needs into data, consent, privacy, and reporting requirements.
• Support commercial data mapping and inventory activities across customer, engagement, digital, patient support, and third‑party data sources.
• Ensure commercial data classifications, consent indicators, approved uses, and restrictions are reflected in relevant data catalogs, documentation, and business processes.
• Support data protection, privacy impact, and commercial data‑use assessments as needed for higher‑risk processing activities.
• Provide clear business, data, consent, privacy, and reporting requirements to IT/BI&T, data product owners, and platform teams.
• Support implementation of consent, preference, notice, opt‑out, data rights, and privacy‑related capabilities across commercial platforms and digital properties.
• Partner with IT/BI&T and platform owners to define requirements for consent management tools, customer data platforms, commercial data products, reporting capabilities, and related system changes.
• Track implementation progress, identify operational gaps, and help coordinate remediation with relevant stakeholders.
• Coordinate across Legal, Compliance, Marketing, Omnichannel, Patient Services, Field, Market Access, IT/BI&T, data product teams, and external partners to support consistent execution.
• Help convert complex privacy and data requirements into clear, usable guidance for commercial teams.
• Support training, communications, documentation, and change management activities related to customer data privacy, consent, and commercial data use.
• Maintain practical documentation, decision frameworks, and operating procedures to support repeatable and audit‑ready execution.
• Support commercial vendor and third‑party data assessments related to privacy, consent, data use and contractual requirements.
• Coordinate with Legal, Procurement, IT/BI&T and business owners to ensure vendor data practices align with BMS requirements.
• Help maintain visibility into third‑party commercial data usage, restrictions, and obligations.

• Bachelor’s degree in Business, Law, Compliance, Information Systems, Data Governance, or a related field; an advanced degree or privacy certification is preferred.
• Minimum five years of experience in privacy operations, consent management, data governance, regulatory compliance, commercial operations, or related…