Privacy Manager DACH (m/w/d) in Heidelberg, Germany

Job Description Summary

Job Description

The Privacy Manager DACH is a member of the Privacy Office and serves as a point of contact for internal stakeholders in the various BD clusters/countries and for local businesses and functions on privacy related matters, reporting – as appropriate – to a member of the BD Global Privacy LT.

This role is responsible for assisting the cluster of countries / single country, and local businesses and functions in:

―addressing, as the Privacy Office first line of defence, all Privacy and Data Protection related issues in their territory and, as appropriate, seeking guidance from or escalating issues to the BD Global Privacy LT

―ensuring appropriate implementation and delivery of the BD Privacy and Data Protection Strategy and Program at the local level , in conformity with all applicable local data protection laws and regulations as well as adjacent laws impacting privacy

―supporting the BD Privacy and Data Protection Governance and Operating Model , working with the Privacy Analysts, coordinating the local network of Privacy Champions and interacting with local DPOs (if any)

―delivering in their territories with respect to all scope areas of the BD Privacy and Data Protection Program , with particular reference to Training & Awareness, Data Lifecycle Management, Incident Management and Individual Rights Processing, Third Party Management and Monitoring & Remediation

Essential / Key Job Responsibilities:

― Privacy Counselling : serve as a point of contact for internal stakeholders in the various BD clusters/countries and for local businesses and functions, and provide them with expert advice on subject matter, with direction from the BD Global Privacy LT

― Project Management : implement appropriate processes and controls to address privacy gaps and mitigate privacy risks, provide project management leadership and support for privacy-related projects, working closely with appropriate functions and businesses

― Data Lifecycle Management : in collaboration with the BD Global Privacy LT, support maintenance of local BD inventories of processing activities, IT platforms and products, assist the business in performing privacy impact assessments, review and approve all assessments and, where appropriate, remediate identified risks

― Written Standards : under the direction of the BD Global Privacy LT, effectively implement all applicable privacy written standards and detect opportunities for developing granular documents to provide guidance to the business in specific circumstances with a view to achieving their objectives, while complying with privacy laws and policies

― Training & Awareness : in accordance with the BD Privacy and Data Protection Strategy, oversee, direct, deliver, or ensure delivery of effective privacy training and guidance to all relevant BD associates, contractors and third parties, with respect to BD privacy written standards

― Third Party Management : support the privacy third party assessment process and, where applicable, the transfer impact assessment process, and ensure appropriate use of privacy contract templates

― Incident Management and Individual Rights Processing : support the Head of Privacy Operations and the Privacy Analysts – Operations in managing and addressing requests and complaints from data subjects, as well as privacy incidents and personal data breaches, drafting accurate answers and liaising with local DPOs and other relevant functions

― Monitoring and Remediation : support the delivery and implementation of plans for privacy compliance, auditing, and monitoring activities to assess the effectiveness and efficiency of the BD Privacy and Data Protection Program, in coordination with the BD Global Privacy LT and other local BD compliance and operational assessment functions

About You

• Bachelor’s Degree (Undergraduate or professional degree in related specialty preferred)

• At least three years of experience in a healthcare privacy compliance role, or equivalent experience with strong focus on GDPR

• IAPP certification(s): CIPP, CIPM, CIPT strongly preferred

• OneTrust certification strongly preferred

• Demonstrated organization, leadership and management skills

• Conducts business with a professional, collaborative approach that is proactive, solution oriented and forward thinking

• Exceptional communication, critical thinking skills, attention to detail, and resourcefulness

• Experience of working in a multinational company and a complex, matrixed environment is a significant plus

Our Offer:

A professional challenge in a highly motivated team, a global environment and with long-term perspectives. A familiar working atmosphere in an innovative environment where your opinion matters. Diversity characterizes our corporate culture and we are convinced that it makes us a stronger team. We value each person as an individual with their abilities and needs. In this sense, we welcome applicants who wish to work part-time, people with severe disabilities and applicants of any gender.

Other benefits include:

• 13th salary à additional salary is paid in June and November (14th for Austria)

• Anniversary bonus

• Share program (GSIP) (after 6 months)

• Group accident insurance

• International health insurance

• Child care allowance

• Office and garage allowance: (company car owner/AD)

• Training measures

• Employee Assistance Program (EAP)

• Special leave (e.g. wedding)

• Company vacations Christmas Eve and New Year’s Eve

Primary Work Location

DEU Heidelberg – Tullastrasse

Additional Locations

AUT Vienna – Handelskai, DEU Frankfurt – Walther-von-Cronberg-Platz

Work Shift

Becton, Dickinson and Company is an Equal Opportunity/Affirmative Action Employer. We do not unlawfully discriminate on the basis of race, color, religion, age, sex, creed, national origin, ancestry, citizenship status, marital or domestic or civil union status, familial status, affectional or sexual orientation, gender identity or expression, genetics, disability, military eligibility or veteran status, or any other protected status.