Associate Director, Privacy Legal Counsel

Job Description

We are seeking a privacy attorney to join our Legal and Compliance Department. The Department is committed to a trusting and collaborative culture where we value growth and development. We engage proactively with our business colleagues to truly understand them and to deliver results for our company and for patients. This position will report to the Director, Senior Privacy Counsel, Global and North America and will be based in the Boston office, with a requirement for 3 days on-site (2 days remote) on a weekly basis.

As the Associate Director Legal Counsel in Privacy, you will provide strategic and solutions-oriented legal advice to a broad spectrum of internal clients on business initiatives involving the processing of personal data. You will also advise our legal colleagues on issues and considerations relating to data protection and security, including as they relate to contracting. As part of the Privacy Office, you will participate in cross-functional projects and mitigate risk throughout the organization.

Responsibilities will include:

• Performing regular privacy assessments of new and existing business processes, providing practical and timely advice to internal clients to design business processes in compliance with applicable data protection requirements, while addressing legal risks and protecting the company's integrity and reputation;
• Acting as subject matter expert and internal escalation point for data protection issues in contracting, including data processing agreements, research collaborations, and transactional agreements; continue to develop template materials for contracting and advise/train members of the legal department on handling privacy-related language in contracts;
• Working closely with our contracting teams to improve and streamline contracting processes and procedures related to data protection and security;
• Assisting the Privacy Office with evaluating and executing a compliance strategy for international data transfers, including the completion of data transfer impact assessments;
• Reviewing data inventories and data protection impact assessments for certain high risk business processes and working with the business, as well as the global data protection officer, to mitigate any residual risks;
• Drafting privacy notices and consents for business processes across the organization, and maintaining the organization's privacy and cookie notices on company websites;
• Developing and reviewing content for privacy training materials and other communications to increase employee understanding of company privacy policies, data handling practices and procedures and legal obligations, as well as to ensure awareness of "best practices" on privacy and data security issues;
• Working with colleagues in our Data, Technology and Engineering team to further develop and refine security practices, mature company procedures and questionnaires for vetting and auditing vendors for privacy and data security related requirements, and review system-related information security plans;
• Evaluating and responding to data subjects requests (e.g., request for information, clarifications, rectification or deletion of personal data) and reports of potential data incidents;

Basic Requirements

• JD from an ABA accredited law school and member of a state bar.
• 6+ years' relevant legal experience, preferably with pharmaceutical, biotechnology, or medical device companies, whether in-house or at a law firm, with privacy experience
• Specific expertise required in statutes, regulations and guidance concerning data protection in Europe and the United States. Familiarity with data protection statutes and regulations in other areas of the world a bonus.
• CIPM, CIPP/US or CIPP/EU certification(s) preferred but not required
• Level of experience Sr Manager/ Associate Director will be commensurate with experience

Skills/Abilities:

• Consummate team player with excellent judgment and interpersonal skills.
• Ability to constructively counsel and influence clients in making the right decisions, and to make tough calls.
• Ability to balance risks in ambiguous and complex situations.
• Demonstrated teamwork and collaboration skills, in particular in leading or contributing to global and multi-functional teams.
• Highly motivated to contribute and grow within a complex area of emerging importance.
• Exceptional written, oral and presentation skills.
• #LI-TH1

Company Information

Vertex is a global biotechnology company that invests in scientific innovation.

Vertex is committed to equal employment opportunity and non-discrimination for all employees and qualified applicants without regard to a person's race, color, sex, gender identity or expression, age, religion, national origin, ancestry, ethnicity, disability, veteran status, genetic information, sexual orientation, marital status, or any characteristic protected under applicable law. Vertex is an E-Verify Employer in the United States. Vertex will make reasonable accommodations for qualified individuals with known disabilities, in accordance with applicable law.

Please note that Vertex requires COVID-19 vaccination for all employees working in the U.S. as a condition of employment at Vertex, subject to medical, religious or other accommodations or exemptions required by law. We believe this requirement is vital to keeping everyone at Vertex and in our communities safe. This requirement applies to both existing and new employees who may at any time work on-site at a Vertex facility or visit another location on behalf of Vertex (e.g., conferences, customer visits, etc.), including all remote employees. Any applicant requiring an accommodation in connection with the hiring process and/or to perform the essential functions of the position for which the applicant has applied should make a request to the recruiter or hiring manager, or contact Talent Acquisition at (see application details).