VP, Chief Privacy Officer, Orthopedics

Job Overview

DePuy Synthes is recruiting for a VP, Chief Privacy Officer (CPO) at locations including Raynham, MA;
Raritan, NJ;
Westchester, PA;
Ireland; and Switzerland.

Job Function:
Legal & Compliance
Job Sub Function:
Enterprise Compliance
Job Category:
People Leader
All Job Posting Locations:
New Jersey (Any City), Pennsylvania (Any City), Raynham, Massachusetts, United States of America

DePuy Synthes is a global leader in orthopaedics and is separating from Johnson & Johnson to become a standalone company. The separation is expected to complete within 18-24 months, subject to legal requirements. Upon completion, the CPO will be an employee of DePuy Synthes and will be governed by its employment processes, programs, policies, and benefits.

• Set and execute the global privacy strategy, policies, and governance framework for DePuy Synthes.
• Ensure compliance with global privacy, data protection and cybersecurity laws and regulations (including GDPR, U.S. state privacy laws, digital product standards and other applicable international requirements).
• Serve as the primary executive leader for privacy risk management, including oversight of privacy impact assessments and mitigation plans.
• Partner with Legal, R&D, Cybersecurity, and Technology teams to integrate privacy-by-design and privacy-by-default into systems, products, and digital initiatives.
• Monitor new and proposed privacy laws and regulations and provide strategic guidance to senior leaders and the Board on privacy risks, trends, and regulatory developments.
• Lead and develop a global privacy organization, including talent development and succession planning, to operationalize privacy requirements and promote a strong culture of privacy and data protection.
• Oversee privacy contracting practices to ensure compliance with applicable laws, guidelines and best practices.
• Direct the development and implementation of a company-wide privacy training program, including the institution and instruction of named privacy stewards in the relevant functions.
• Together with Cybersecurity, oversee privacy incident response, investigations, and support regulatory interactions as needed.
• Collaborate with Government Affairs to develop and maintain trusted relationships with data protection commissioners and government enforcement agencies, and execute a strategy for impacting evolving privacy laws affecting the company.

• JD in the United States or in a European jurisdiction.
• 14+ years of progressive experience in privacy, data protection, cybersecurity, or related risk functions within a complex, global organization in a healthcare field (hospital system, medical device or medtech company, pharmaceutical industry).
• Demonstrated expertise interpreting and applying global privacy regulations, including GDPR, U.S. federal and state privacy laws, HIPAA, and relevant FDCA regulations.
• Experience advising senior executives on privacy strategy and enterprise risk.
• Demonstrated ability to build, operationalize, and improve processes and high-performing teams.
• Proven ability to lead global, cross-functional teams and influence without direct authority.
• Strong strategic thinking, judgment, and decision-making capabilities.

• Prior experience supporting or managing a data incident management and response process, including data subject and regulatory enforcement agency notifications.
• Background partnering with information systems, cybersecurity, and digital technology teams.
• Experience supporting business transformation or operating-model changes.
• Degree in Information Systems, Master of Business Administration, or Master of Public Policy.
• Certifications such as CIPP, CIPM, or equivalent.

• Travel:
  Up to 20%, domestic and international.
• Language:
  Fluency in English required; additional languages a plus.

Anticipated base pay range: $ - $. Eligible for long-term incentive program and the company’s consolidated retirement plan (pension) and savings plan (401(k)), subject to plan terms. Eligible for company-wide benefits including:

• Vacation - 120 hours per calendar year.
• Sick time - 40 hours per calendar year (48 hours for Colorado residents, 56 hours for Washington residents).
• Holiday pay, including floating holidays - 13 days per calendar year.
• Work, Personal and Family Time - up to 40 hours per calendar year.
• Parental Leave - 480 hours within one year of the birth/adoption/foster care of a child.
• Bereavement Leave - 240 hours for immediate family; 40 hours for extended family per calendar year.
• Caregiver Leave - 80 hours in a 52-week rolling period.
• Volunteer Leave - 32 hours per calendar year.
• Military Spouse Time-Off - 80 hours per calendar year.

Johnson & Johnson is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, age, national origin, disability, protected veteran status or other…