Associate Vice President – Chief Privacy Officer

Associate Vice President – Chief Privacy Officer

Requirements

• J.D. or equivalent degree from an accredited law school and a license in good standing to practice law.
• Minimum of 8 years of legal experience, including at least four years of substantive privacy law experience.
• Proficiency in GDPR, US and China privacy and data protection compliance requirements is required.
• Excellent communication and influencing skills – comfort in public speaking is a must.
• Strong negotiation skills with the capacity to influence outcomes.
• Strong sense of integrity and ability to work collaboratively within a matrixed organization.
• Experience working with teams across multiple regions (e.g., Asia, Europe, and the Americas) is essential.
• Proficiency in information technology; experience using OneTrust is preferred.

Responsibilities

• Providing a strategy, framework, vision, and leadership for the global Data Protection & Privacy team with a risk-based principles-based approach with a global, regional, and local set of policies, tools, and resources.
• Establishing strong partnerships with cross-functional partners to enable a unified approach to data protection in Agilent.
• Monitoring privacy, data protection, cybersecurity, AI and related laws and regulations and evaluating their potential impact on Agilent.
• Taking initiative to develop a clear understanding of company products, businesses, and planned modifications and growth to assist in developing global, regional and local privacy/compliance strategies, policies and tools.
• Overseeing the Data Protection & Privacy team in guiding the business to understand what privacy and data protection should mean to them and their responsibilities.
• Supporting Internal Audit investigations and effective resolution of audit findings as it relates to data protection, privacy and AI.
• Providing legal support to Information Security & Risk Management regarding the legal impact and reporting requirements related to information security incidents.
• Partnering closely with Information Security & Risk Management, Intellectual Property and Litigation colleagues on data loss prevention in terms of incident support, triaging, policy development including with regard to handling of confidential information, training and awareness raising.
• Supporting mergers, acquisitions and divestitures Legal work, specifically to lead due diligence and integration efforts as it relates to data protection, privacy, records management and AI.
• Developing and delivering compelling training and communications to the teams on privacy, data protection and records and information management, which are clear, easy and actionable (with sprinkles of fun!).
• Partnering with key stakeholders to develop alignment on records and information management strategy, policy and practices.
• Providing input on data protection and privacy contractual clauses for customer, supplier, healthcare professional, channel partner, employee and other contracts as may be required, and assist in the negotiation of key contract terms, as needed.
• Managing and overseeing all operational aspects of the Data Protection & Privacy program including data subject requests, data protection impact assessments, data flow and process mapping, security incident notifications, investigations, policies, registrations, trainings, contracts, program audits, program certifications, monitoring of legal updates, and dashboard reporting.
• Acting as a key member of the Legal Compliance team providing subject matter support beyond Data Protection & Privacy in other areas of compliance where there are global, regional or locally relevant regulations such as Anti-Bribery, Anti-Corruption, Fraud & Abuse, Healthcare Compliance, Channel and Supplier Management, Conflict of Interests, and other areas as needed.

Preferred Qualifications

• Experience with AI regulations: Given the increasing importance of AI in privacy and data protection, familiarity with AI-related legal matters and regulations, such as the EU AI Act, would be beneficial.
• CIPP/US or CIPP/EU certification is preferred; privacy certification is expected within the first year of employment.
• Knowledge of regulations impacting the collection and use of patient and genetic data is a strong plus.
• Legal compliance experience beyond privacy is a strong plus, particularly in areas such as Anti-Bribery/Anti-Corruption, Supplier Management, and/or Channel Partner Management.
• Leadership and strategic planning skills: The ability to lead a team, engage with stakeholders at all levels, and communicate complex privacy issues effectively.