Privacy Manager, China

在 Johnson & Johnson，我们相信健康就是一切。 我们在医疗创新方面的实力使我们能够建立一个能够预防，治疗和治愈复杂疾病的世界,在这个世界中,治疗更智能，侵入性更低,并且解决方案是个性化的。 凭借我们在创新医学和医疗技术方面的专业知识,我们处于独特的地位,能够在当今的全套医疗保健解决方案中进行创新,以实现未来的突破,并对人类的健康产生深远的影响。 如需了解更多信息，请访问jnj.com

在我们的信条指引下，强生公司对全球范围内与我们共事的员工负有责任。我们提供一个包容的工作环境，在这里每个人都被视为独立的个体。在强生，我们尊重员工的多样性和尊严，并认可他们的价值。

工作职能：Legal & Compliance

作业子功能：Enterprise Compliance

职位类别：Professional

所有职位发布位置：Shanghai, China

职位描述：
DePuy Synthes is recruiting for a Privacy Manager, located in Shanghai, China.

The Privacy manager of DePuy Synthes in China is responsible for implementing and overseeing the privacy compliance program for all DePuy Synthes activities in China, identifying privacy risks and developing policies and procedures, training, and controls to ensure DePuy Synthes is operating in compliance with applicable local privacy laws as well as DePuy Synthes global privacy program.

In this role, the privacy manager will have the opportunity to actively support and shape all projects related activities of DePuy Synthes in China that involve privacy considerations, providing strategic advice to ensure compliance with local data protection laws while enabling responsible innovation across a complex medical technology organization.

In this position, the individual shall serve towards the authorities as the designated Personal Information protection officer for DePuy Synthes entities in China.

The position will have a direct line of reporting to the Asia Pacific Data protection Officer.

Key Responsibilities

Lead the implementation and ongoing oversight of the DePuy Synthes global privacy program in China, identifying privacy risks and developing policies and procedures, training, and controls to ensure alignment with applicable local data protection laws and regulations as well as the DePuy Synthes global privacy program.

Advise business partners and key functional partners on privacy and data protection requirements associated with new products, digital health solutions, clinical activities, and commercial initiatives, to ensure privacy by design is embedded across business operations and digital products.

Serve towards the authorities as the designated Personal Information protection officer for DePuy Synthes entities in China and fulfil related obligations.

Lead efforts to embed privacy capabilities in named privacy champions from relevant functions, including handling escalations, driving consistency and delivering ongoing training and education to the champions in China.

Oversee local privacy impact assessments, cross border data transfer filings, and mitigation plans for high‑risk processing activities.

Partner with Information Security and Legal teams to support incident response, breach management, and regulatory communications in China when required.

Lead privacy training and awareness programs to strengthen a culture of data protection and accountability across the organization.

Monitor regulatory developments and emerging privacy risks, translating requirements into practical business guidance, identifying any required regional-specific variants from global privacy policies, standards, and procedures to support compliant collection, use, transfer, and retention of personal data in China.

Maintain external relationships with China regulators and internal stakeholders to support audits, inquiries, inspections and data incident responses in conjunction with cross-functional partners.

Qualifications

Education

Bachelor’s degree required, preferably in Law

Advanced degree (JD, LLM, MBA, or equivalent) preferred.

Experience and Skills

Minimum 6 to 8 years of experience in privacy, data protection legal roles, including in a complex global corporation or private practice.

Specific data protection or privacy experience within medical devices, medtech, life sciences pharmaceutical industries or healthcare insurers or systems.

Strong working knowledge of China privacy regulations (e.g., PIPL, CBDT, DSL) and their business application.

Experience partnering with technology, security, and digital teams on privacy‑by‑design initiatives.

Significant experience supporting and implementing China privacy program.

Ability to maintain the highest standards of quality, compliance and accountability when advising the business.

Ability to translate a wide variety of principles and, sometimes complex, legal requirements into actionable solutions for the business.

Ability to work autonomously and in a remote team, with various stakeholders in a matrix environment.

Strong negotiation and communication skills (both oral and written).

Chinese native, Oral and written English proficiency, excellent drafting skills.

Travel: Up to 10% international travel.

Johnson & Johnson is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, age, national origin, disability, protected veteran status or other characteristics protected by federal, state or local law. We actively seek qualified candidates who are protected veterans and individuals with disabilities as defined under VEVRAA and Section 503 of the Rehabilitation Act.

Johnson & Johnson is committed to providing an interview process that is inclusive of our applicants’ needs. If you are an individual with a disability and would like to request an accommodation, external applicants please contact us via https://www.jnj.com/contact-us/careers, internal employees contact AskGS to be directed to your accommodation resource.

#LI-Hybrid

#DePuySynthesCareers

Required Skills:

Preferred Skills:
保密, 法律服务, 法律职能, 风险规范, 合规管理, 合规政策, 技术可信度, 勘察技术, 控制合规, 流程优化, 内部审计, 培养他人, 审计和合规趋势, 训练, 战术规划, 政策开发, 咨询