Senior Legal Counsel, Data Privacy

embecta is a global medical device company with a 100-year legacy in insulin delivery and diabetes care. Driven by innovation, purpose, anda commitment to improving lives, we are expanding our portfolio of solutions to serve even more patients, healthcare providers, and communities around the world.

Imagine the long legacy and global scale of an industry leader combined with the agility, speed, and entrepreneurial energy of a startup—that's embecta. We are evolving from a company with more than 100 years of experience in diabetes care into a broader medical supplies organization, helping more than 30 million people worldwide live their best lives through innovative solutions, partnerships, and the strength of our global team.

At embecta, you are empowered to take ownership, bring your authentic self to work, and accelerate your career alongside inspiring leaders.

The Senior Legal Counsel, Global Privacy serves as the lead attorney for embecta's global privacy program, responsible for executing the company's privacy strategy and overseeing the design, implementation, maintenance, and continuous enhancement of privacy compliance processes worldwide. This role partners closely with stakeholders across the organization to ensure compliance with evolving privacy laws and regulations while enabling business growth and operational objectives.

In addition, the position provides commercial legal support to embecta's Canadian business.

This is a hybrid position on-site (3) days a week in Parsippany, New Jersey.

• Lead the ongoing management and operation of embecta’s global privacy program and coordinate the activities of the Privacy Steering Committee in partnership with the Chief Ethics, Compliance and Privacy Officer.
• Provide practical, risk-based legal guidance regarding the application of privacy, data protection, and cybersecurity requirements to the company’s existing and proposed products, services, technologies, systems, and business processes.
• Work across functions to design, implement, maintain, and enhance privacy governance processes and operational controls, including processes relating to third-party privacy reviews, data subject access requests, data mapping and inventories, records of processing activities, data protection impact assessments, and privacy impact assessments.
• Lead the development and implementation of privacy-by-design standards and practices consistent with applicable legal, regulatory, and industry requirements.
• Promote awareness and understanding of privacy requirements through training, communications, guidance materials, and other educational initiatives.
• Develop and maintain a strong understanding of the company’s operations, products, systems, technologies, data practices, customers, end users, vendors, and privacy risk environment.
• Develop, implement, maintain, and update internal privacy policies, procedures, standards, and work instructions, as well as external privacy notices, website privacy statements, and cookie notices and banners.
• Develop and manage an annual privacy risk assessment process and coordinate the tracking and remediation of identified risks.
• Advise on privacy incidents and potential data breaches, including risk assessment, investigation, documentation, notification, remediation, and coordination with relevant internal stakeholders.
• Develop and refine privacy program metrics and reporting relating to incidents, breaches, data subject requests, risk assessments, training, and other program activities, and recommend appropriate program improvements.
• Develop and maintain template data processing agreements, business associate agreements, and similar privacy and data protection agreements.
• Support the…