.The PositionThe team :We are the global product security and privacy center of Roche Diagnostics worldwide. Our vision :To build a solid Global Product Security and Privacy Operations function, provide strategic security insight across Roche Diagnostics to ensure our devices are what our regulators require and our patients deserve.Our priorities :Understanding our customers and Stakeholder needs to deliver effective security on testing solutions.Develop an agile and sustainable operating business model to deploy security concepts that enable confident healthcare decisions.Institutionalize security role models to provide guidance, education and awareness to maximize the security of Roche Diagnostics solutions and create trust along the patients journeys.Data security and privacy are key success factors in our digital transformation and essential to reach our ambitions. You are inspired to contribute to the overall Roche Diagnostics vision by applying end-to-end Division-wide product security and privacy operations to keep our products and services secure and privacy compliant throughout the entire lifecycle.You believe in the potential of science, technology, data and insights to improve the standard of care for humankind and you are eager to help navigate through unchartered territory to lift this potential.The Privacy & Compliance Expert will :Manage ongoing security & privacy compliance audits, and certification programs.Establish and promote business compliance implementation process, and ensure the risk convergence and privacy protection technology for business scenarios.Support legal and technology teams in drafting privacy-related policies, standards, guidelines, and processes.Promote privacy program implemented in all business areas, including medical devices and cloud solutions.Promote the development and utilization of privacy protection and automation tools.Communicate and evangelize the importance of security & privacy and support Roche and Roche leadership to expand our influence in industry on security & privacy topics.Maintain Information Security program and compliance focusing in privacy related topics.Help to create a knowledge base of likely inspection behavior of the privacy regulators (Germany, Spain, France, US, China), including ongoing analysis of reported inspections, published material, etc.Define and maintain the internal key processing activities related to Privacy Governance, including but not limited to: data protection impact assessments (DPIA's), data processing agreements, data retention, data deletion approach, training records, etc.Spot-check reviews of contracts and security and privacy controls listed in DPIAs.Prepare privacy certifications (by role playing certification body).Manage the Privacy and Information Security Management System (PIMS)
