30 ott - Milano
Sanofi Group
ppbJob Title /b: Local Privacy Officer Italy /ppbLocation /b: Milano, Italy /ppAbout the job /ppAs a bLocal Privacy Officer (LPO) /b, you will be a strategic business partner responsible for protecting data subjects rights and freedoms, enabling data-driven innovation within Sanofi and maximizing business opportunities. You will lead the implementation of the Privacy operating model, balancing robust data protection with business growth opportunities in an increasingly complex privacy landscape. This role requires you to address critical privacy risk areas, implement privacy maturity at all levels of the company, generate trust and transparency while enabling the business to deliver according to its objectives. /ppActing as a force of proposal you'll have to proactively contribute to a robust data governance while having a thoughtful risk-based approach. You will manage local privacy initiatives while contributing to global and regional projects, ensuring compliance with evolving privacy regulations and championing privacy-by-design principles in an increasingly AI-driven environment. /ppKey Accountability /ppPrevent Privacy Risks /pulliDevelop and maintain a comprehensive local privacy risk assessment framework that addresses business maturity and ownership, and promotes the effective implementation of the privacy operating model among leadership team members and key stakeholders /liliUnderstand, map and become familiar with business strategy and activities to proactively support their deployment while mitigating privacy risks /liliAppoint and lead the Local Privacy champions' network to implement in a proactive way privacy strategy and priorities /liliMonitor and analyze local privacy regulations, AI regulatory developments, and enforcement trends and document implement local variations of global procedures when required by local laws /liliContribute to global position papers, develop and maintain external network with public authorities and other privacy networks, represent Sanofi in industry advocacy efforts to enhance transparency and build trust with internal and external stakeholders /liliActively contribute to transformation initiatives impacting both the business the privacy operating model /liliImplement privacy-by-design principles in both local and global projects, with a focus on emerging technologies, innovation, data security and data democratization /liliIn accordance with the Global Privacy maturity framework, provide periodic reports to map existing and emerging privacy risks /liliProvide periodic reports to the Italy Leadership Team to map existing and emerging privacy risks, in accordance with the Global Privacy maturity framework /liliAdapt global privacy templates and procedures to local requirements while maintaining consistency, including vendor management due diligence, oversight and monitoring /liliMonitor and assess data sovereignty regulatory developments across jurisdictions relevant to Italy, including cross-border transfer requirements, and escalate identified risks to the relevant governance bodies /liliImplement and promote Data Sovereignty by Design principles in local and regional projects, ensuring that data sovereignty risk screening is integrated into business transition and transformation design processes, in alignment with the Data Compass framework and the data transfer compliance routes /liliMonitor and analyze AI regulatory developments, including the EU AI Act, and their intersection with data protection law (GDPR), to proactively identify and mitigate privacy risks arising from AI systems, automated decision-making (ADM), and profiling activities deployed locally or globally impacting data subjects in Italy /liliIntegrate AI and ADM risk considerations into the local privacy risk assessment framework, ensuring that high-risk AI systems and profiling activities are subject to appropriate Data Protection Impact Assessments (DPIAs) and, where required, prior consultation with the Garante per la protezione dei dati personali /li /ulpProtect Fundamental Rights and Sanofi's Interests /pulliOversee the mapping and maintenance of local personal data processing activities,
and ensuring transparency and effectiveness in data handling practices /li /ululliPerform, review and validate accuracy of local privacy, assets and vendors assessments to protect individual rights and freedoms and to protect Sanofi's liability, reputation and license to operate /li /ululliManage data subject rights requests and personal data breaches promptly and effectively to maintain trust and prevent business issues and disruptions /li /ululliDevelop and deliver targeted privacy training and awareness programs to increase business maturity and ownership of relevant stakeholders and staff /li /ululliProactive escalation of privacy risks to the relevant governing bodies to incorporate new developments and expectations in both privacy operating model and business operations /li /ululliServe as the primary liaison with local Data Supervisory Authorities, demonstrating business maturity in privacy compliance /li /ululliCoordinate privacy audits and dawn raid responses, ensuring data security measures are properly implemented and documented /li /ululliDedicate significant part of the activities to global and regional projects, working groups, processing activities and privacy assessments to support both the Global privacy operating model and global and regional business /li /ululliEnsure that cross-border personal data transfers involving Italy-based operations comply with applicable data sovereignty regulations, including GDPR adequacy and transfer mechanisms (BCRs, IGTA), and that any transfer involving countries of concern under Data Sovereignty Programs is identified, assessed and escalated to the relevant governance body /li /ululliContribute to the Know Your Data initiative by maintaining an accurate mapping of data flows involving Italy-based personal data, including health data, HCP data, and RD data, and ensuring these flows are covered by appropriate legal bases and transfer mechanisms /li /ululliPerform and oversee privacy risk assessments for AI systems, automated decision-making processes, and profiling activities, ensuring compliance with applicable legal and regulatory frameworks, and anticipating emerging risks, and that data subjects' rights are effectively protected /li /ululliEnsure that individuals subject to automated decision-making or profiling by Sanofi are provided with meaningful information, and that appropriate human oversight mechanisms are in place, particularly for decisions producing significant effects on data subjects (e.g., in HR, commercial, or clinical contexts) /li /ulpEnable Trustworthy Innovation /pulliProactively partner with Global and Local Process Owners and Digital teams to integrate privacy considerations into new initiatives, especially those involving data democratization, innovation, AI innovation and business transformation /li /ululliPrivacy to be source of value propositions also through effective privacy-by-design approach, technological innovation with ethics and integrity, thoughtful risk-based aligned with the decision operating model and the risk continuum framework (i.e. DAI model) /li /ululliEnsure the protection of individual risks freedoms while maximizing business opportunities AI, advanced analytics and while maximizing business opportunities through a Thoughtful Risk-based approach /li /ululliGenerate trust and transparency while enabling the business to deliver according to its objectives /li /ululliDemonstrate agility and develop mature skills to perform privacy roles and responsibilities in an evolutive and uncertain business environment /li /ululliReport on privacy program KPIs and demonstrate the business impact of privacy initiatives in supporting innovation and transformation /li /ululliSupport the deployment of Sanofi's Data Compass framework locally,
enabling compliant cross-border data transfer that sustains Sanofi activities and AI development, while minimizing business disruption and regulatory exposure /li /ululliActively contribute to industry advocacy and regulatory monitoring efforts on data sovereignty topics, helping shape rules that support pharmaceutical innovation and protect Sanofi's ability to serve patients globally /li /ululliChampion responsible and privacy-preserving AI practices within the Italy affiliate, embedding privacy-by-design and ethics-by-design principles into AI development and deployment pipelines, and ensuring that AI innovation is conducted in full compliance with applicable legal and regulatory frameworks, and Sanofi's internal AI governance framework /li /ululliServe as a trusted advisor to business and digital teams on the privacy implications of AI, machine learning, profiling, and automated decision-making use cases, enabling innovation while safeguarding data subjects' rights and Sanofi's reputation /li /ulpKey Working Relationships /ppInternal /pulliBe part of Italy leadership teams and ensure close partnership with EBI and Legal teams to be voice of Privacy and ensure that the Prevent-Protect-Enable is effectively understood in place and in use /li /ululliInfluence senior stakeholders including General Management, Digital, HR, RD, and Commercial teams to embed privacy considerations in transformation initiatives /li /ululliCollaborate with and guide local privacy champions across departments to increase business maturity and ownership of privacy /li /ululliManage and develop a network of external Local Privacy Officers to deliver according to the local legal requirements and business expectations /li /ululliEnsure One voice with the LEBIGS team /li /ululliParticipate in Global Privacy Committee meetings and working groups focused on data democratization and innovation /li /ululliPartner with global teams on cross-functional privacy initiatives to ensure that data security is integrated with privacy controls /li /ulpExternal /pulliEstablish and maintain relationships with local Data Protection Authorities to build transparency and trust /li /ululliRepresent Sanofi in local privacy and trade associations to influence privacy standards that support innovation /li /ululliEngage with external partners and vendors on privacy-related matters, implementing robust vendor management practices /li /ululliAct as an advocate for privacy rights of external data subjects (candidates, consumers, patients) while enabling data democratization initiatives /li /ulpAbout You /ppiExperience /i /pulliPrior experience in Healthcare/Life science sector is an advantage /li /ululliExperience working in highly regulated environments, preferably in project and/or compliance management /li /ululliIn-depth knowledge of data privacy and AI regulations /li /ululliExperience working in an international environment /li /ulpiSoft Skills /i /pulliMulti-stakeholder management based on influence rather than formal relationships /li /ululliExcellent communication, negotiation, writing and advisory skills /li /ululliAbility to balance legal/company requirements and business enablement /li /ululliWillingness to travel /li /ulpiTechnical Skills /i /pp• CIPP/E, CIPM, AIGP or similar privacy qualification /ppiEducation /i /pp• Master's or bachelor's degree (law or computer sciences is an advantage) /ppiLanguages /i /pp• Strong English and Italian skills (verbal and written), ability to exchange fluently in a global environment /pbrpbPursue /b iProgress /i. bDiscover /biExtraordinary /i. /ppJoin Sanofi and step into a new era of science - where your growth can be just as transformative as the work we do. We invest in you to reach further, think faster, and do what’s never-been-done-before. You’ll help push boundaries, challenge convention, and build smarter solutions that reach the communities we serve. Ready to chase the miracles of science and improve people’s lives? Let’s Pursue iProgress /i and Discover iExtraordinary /i – together. /pbrpWatch the a uALL IN /u /a video and discover our Diversity, Equity Inclusion actions on a usanofi.com /u /a! /pbrp#LI-EUR /pp#LI-HYBRID /p /p #J-18808-Ljbffr