Senior Privacy Compliance Manager
__jobinformationwidget.freetext.LocationText__
Shanghai, Shanghai
- Corporate
- Hybrid
- Full-time
About AbbVie
AbbVie's mission is to discover and deliver innovative medicines and solutions that solve serious health issues today and address the medical challenges of tomorrow. We strive to have a remarkable impact on people's lives across several key therapeutic areas including immunology, oncology and neuroscience - and products and services in our Allergan Aesthetics portfolio. For more information about AbbVie, please visit us at www.abbvie.com. Follow @abbvie on LinkedIn, Facebook, Instagram, X and YouTube.
Role Description:
The Privacy Compliance Senior Manager for the Office of Ethics and Compliance (OEC) will serve as the regional privacy compliance lead for assigned AbbVie affiliates, business units, Medical and R&D teams. The role is responsible for translating AbbVie’s Global Privacy Program into regional strategy, governance, risk management, and implementation priorities, while partnering with the legal Privacy Senior Counsel, Global Privacy Office, affiliate leadership, and cross-functional stakeholders to strengthen privacy compliance across the region.
This role is expected to operate with significant independence, exercise sound judgment on complex privacy matters, influence senior stakeholders, and drive consistent implementation of privacy compliance priorities across multiple affiliates and functions. The role will also oversee regional privacy initiatives, coordinate with local privacy contacts, and represent the Global Privacy Office in regional governance forums.
Responsibilities:
- Lead the regional implementation, governance, and continuous improvement of AbbVie’s Global Privacy Program in cooperation with the Privacy Compliance Director and Global Privacy Office.
- Provide strategic privacy compliance partnership to affiliate and business unit leadership across the assigned region, serving as a trusted advisor on privacy risks, controls, accountability, and decision-making for key initiatives.
- Support regional and global strategy for cross-border data transfers by advising on transfer obligations, localization requirements, regulatory restrictions, and other legal or operational constraints that may affect business-critical global data flows.
- Identify, assess, resolve, and escalate complex privacy compliance issues, ensuring timely engagement with the Privacy Compliance Director, Global Privacy Office, Legal, OEC, Information Security, and relevant business stakeholders as appropriate.
- Detect, anticipate, and prevent privacy-related risks.
- Provide privacy guidance on business initiatives and projects.
- Monitor data flows and maintain privacy records in coordination with local functions.
- Provide support on the management of Data Subjects Rights requests in the assigned region and assist with the Global Privacy Office inbox triage.
- Lead or coordinate regional implementation of global and regional privacy projects, ensuring local requirements, resourcing, stakeholder engagement, and change management are addressed effectively.
- Raise local privacy awareness through training and communication.
- Aid Incident Response Team managing any data breaches originating or having an impact on the assigned Affiliates and business units.
- Holds risk assessment conversations with internal audit during the audit planning and support any privacy audits for the assigned Affiliates and business units.
- Help monitor plans to effectively measure compliance with the privacy program’s key requirements for the assigned Affiliates and business units and identify concern areas early.
- Monitor industry, legal, regulatory, and enforcement developments and translate relevant changes into practical regional actions that maintain and enhance AbbVie’s privacy compliance program.
- Shape the external privacy environment through engagement with local privacy working groups, industry associations, IPMPC working groups, IAPP workshops, and other relevant forums where appropriate. Act as Data Protection Officer for assigned affiliates in the region where required and serve as a primary point of contact for external authorities.
- Represent the Global Privacy Office in ACIFs and other regional or global governance forums, providing privacy input and risk insights.
- Strong expertise in privacy, data protection, compliance, and technology matters, including the ability to apply privacy requirements to complex business processes and data-driven initiatives.
- Familiarity with compliance processes and practices and enterprise technology systems, such as HR management and CRM systems, risk management is considered an advantage.
- Prior experience in the pharmaceutical, medical device, life sciences, or similarly regulated industry is strongly preferred.
- Excellent communication, influencing, and stakeholder management skills are required, including a proven ability to collaborate effectively across a global matrix organization.
- Experience advising on and operationalizing privacy requirements across JAPAC markets, including regulations such as Korea’s PIPA, China’s PIPL, Japan’s APPI, and other applicable regional privacy laws, is strongly preferred.
- Fluency in English and Chinese is required.
- Prior privacy and/or security certifications or credentials (e.g. CIPP) are considered an advantage.
Preferred Qualifications: Bachelor’s degree or equivalent is required; advanced degree in law, privacy, compliance, information governance, public policy, or related field is preferred.
Job Classification: minimum of 5 years of work experience in privacy
Primary Location: AbbVie commercial office
Organization: Office of Ethics and Compliance
Travel: 5%
AbbVie is an equal opportunity employer and is committed to operating with integrity, driving innovation, transforming lives and serving our community. Equal Opportunity Employer/Veterans/Disabled.
US & Puerto Rico only - to learn more, visit https://www.abbvie.com/join-us/equal-employment-opportunity-employer.html
US & Puerto Rico applicants seeking a reasonable accommodation, click here to learn more:
https://www.abbvie.com/join-us/reasonable-accommodations.html
We have recently become aware of various recruitment phishing scams targeting job seekers. Please be advised:
- AbbVie will never request sensitive personal information (such as bank account details, social security numbers, or payment of any kind) during the recruitment process.
- If you suspect you have received a fraudulent offer or communication claiming to be from AbbVie, please do not respond, open any attachments, or click on any hyperlinks.
If you have any questions or concerns regarding the authenticity of a communication alleged to have been made by or on behalf of AbbVie, please contact us immediately.
Protect yourself by verifying job offers and communications. Your safety is important to us.
Where We Work
Role is primarily site- or office-based but can occasionally be performed remotely. Employees who are site/office-based and can occasionally perform their role virtually work both in the office and remotely*, following the policies and regulations in place at their location. US Employees must be in the office on Tuesday, Wednesday, and Thursday with flexibility to work remotely on Mondays and Fridays. Three days in the office is the minimum; some individuals or teams may require more in-office days due to meetings, business/project needs or their role.