Associate Director, Customer Data Privacy & Consent Enablement

Associate Director, Customer Data Privacy & Consent Enablement

The Associate Director, Customer Data Privacy & Consent Enablement is a business-side commercial operations role within the Commercialization AI Strategy & Analytics function, reporting to the Director, Global Consent & Data Privacy.

This role is responsible for helping BMS translate evolving privacy, consent, and customer data requirements into practical commercial processes, data requirements, and system capabilities. The role serves as a bridge between Legal, Compliance, Marketing, Omnichannel, Patient Services, Field, Market Access, IT/BI&T, data product teams, and other commercial stakeholders to support compliant HCP and patient engagement across commercial channels.

The Associate Director is not a Legal or Compliance role. Instead, the role focuses on operational enablement: understanding commercial engagement initiatives, translating business and privacy needs into clear requirements, and helping ensure those requirements are embedded into workflows, platforms, data products, consent capabilities, and reporting processes.

Responsibilities:

Commercial Privacy & Consent Enablement

• Translate privacy, consent, and customer data requirements into practical guidance, workflows, controls, and operational processes for commercial teams.
• Support the operational pull-through of applicable privacy and consent requirements across HCP, patient, digital, omnichannel, and third-party commercial data activities.
• Partner with Legal, Compliance, and Global Consent & Data Privacy to assess new or changing requirements and determine commercial impact.
• Help maintain operational readiness as privacy, consent, and customer data requirements evolve across applicable jurisdictions.

Commercial Data Requirements & Governance

• Partner with Marketing and other commercial functions to understand HCP and patient engagement initiatives and translate business needs into data, consent, privacy, and reporting requirements.
• Support commercial data mapping and inventory activities across customer, engagement, digital, patient support, and third-party data sources.
• Ensure commercial data classifications, consent indicators, approved uses, and restrictions are reflected in relevant data catalogs, documentation, and business processes.
• Support data protection, privacy impact, and commercial data-use assessments as needed for higher-risk processing activities.

Technology & Platform Implementation Support

• Provide clear business, data, consent, privacy, and reporting requirements to IT/BI&T, data product owners, and platform teams.
• Support implementation of consent, preference, notice, opt-out, data rights, and privacy-related capabilities across commercial platforms and digital properties.
• Partner with IT/BI&T and platform owners to define requirements for consent management tools, customer data platforms, commercial data products, reporting capabilities, and related system changes.
• Track implementation progress, identify operational gaps, and help coordinate remediation with relevant stakeholders.

Cross-Functional Coordination & Operational Readiness

• Coordinate across Legal, Compliance, Marketing, Omnichannel, Patient Services, Field, Market Access, IT/BI&T, data product teams, and external partners to support consistent execution.
• Help convert complex privacy and data requirements into clear, usable guidance for commercial teams.
• Support training, communications, documentation, and change management activities related to customer data privacy, consent, and commercial data use.
• Maintain practical documentation, decision frameworks, and operating procedures to support repeatable and audit-ready execution.

Vendor & Third-Party Data Coordination

• Support commercial vendor and third-party data assessments related to privacy, consent, data use, and contractual requirements.
• Coordinate with Legal, Procurement, IT/BI&T, and business owners to ensure vendor data practices align with BMS requirements.
• Help maintain visibility into third-party commercial data usage, restrictions, and obligations.

Qualifications:

• Bachelor's degree in Business, Law, Compliance, Information Systems, Data Governance, or…