Job Description
769 million lives touched by our products. Imagine what you could do at Novartis. No matter where you work, you could contribute to solving some of the toughest healthcare challenges and have an extraordinary impact on people’s lives. Join us!
We are hiring for a DPDAI Head to join our Middle East and Africa (MEA) Cluster. The role will be based in UAE.
The DPDAI – MEA Cluster ensures that the global DPDAI program is effectively implemented at a country level and coordinates advice and guidance on DPDAI topics to the Novartis business in the countries under her/his respon-sibility.
By coordinating advice and guidance on DPDAI topics to Novartis stakeholders in the MEA Cluster and ensuring that the global DPDAI program is effectively implemented at the local level, the DPDAI – MEA Cluster Head sup-ports innovation and preserves the integrity of Novartis and enables the Head DPDAI Compliance and Group Data Protection Officer to provide risk assurance to the ECN and to the Board of Novartis AG, and documents and demonstrates compliance with all relevant Data Privacy & AI laws and standards and Novartis policies within the countries.
MAJOR ACCOUNTABILITIES
• MEA Cluster countries include Turkey, Saudi Arabia, UAE, Kuwait, Qatar, Oman, Bahrain, Egypt, South Af-rica, Morocco, Algeria, Tunisia, Jordan, Palestine, Lebanon and Sub-Saharan Africa countries
• Contribute to the global DPDAI strategy and program
• Understand the MEA Cluster regulatory framework and act as local DPDAI leader. Partners with the busi-ness guiding them on the data regulatory framework and being accountable for responsible data use
• Implement group-wide or global practical guidelines/procedures (e.g., on collecting consent preferences, secondary uses of personal data, secure destruction of data) and data transfer mechanisms (e.g., binding corporate rules, standard contractual clauses and cross-border privacy rules) translating the privacy poli-cy into specific requirements
• Develop and maintain data privacy notices and associated procedures (e.g., scripts for use by employees) as well as procedures for inquiries/complaints (e.g., access requests, complaints) based on Novartis glob-al standards
• Serve as first point of contact for the Business on matters relating to the interpretation of group-wide DPDAI policies, procedures and guidelines
• Identify & address data emerging legislation/regulation and respective impact to Novartis operations, supporting the adaptation activities required for respective compliance and collaborate with DPDAI ERC Head – APMA to ensure compliance
• Identify Business operational trends and keep up to date with Business strategy and priority, enabling co-operation by facilitating regular exchange of all relevant internal stakeholders
• Lead a DPDAI risk management strategy for the MEA Cluster: identify DP & AI risks impacting the local organization as a whole or requiring senior management attention and raise these to the DPDAI ERC Head – APMA and through channels and processes established by DPDAI Process, Governance & Controls
• Prepare and disclose reports on handling of personal data to the DPDAI ERC Head – APMA
• Liaise with Legal advisory for Data Privacy on specific legal issues
• Collaborate with DPDAI ERC Head – APMA and Local Legal advisory for Data Privacy on the conduct of research on global and country specific regulatory developments
• Provide input into data monitoring strategy, and acts on insights thereof
• Keeps up to date in relation to all the new laws and regulations impacting DPDAI in the MEA Cluster, and informs the business on the same
• Represent Novartis externally vis-à-vis relevant industry and privacy associations.
Diversity & Inclusion / EEO
Novartis is committed to building an outstanding, inclusive work environment and diverse teams representative of the patients and communities we serve.
Minimum Requirements
Education: Law degree, or business degree with executive education in Privacy
Languages: English, Turkish (preferable)
Ideal experience:
• Significant experience in an international law firm or legal department of an international company. Experience in the pharmaceutical/healthcare sector is a plus.
• Deep knowledge of global data privacy regimes and familiarity with data privacy compliance programs and frameworks
PROFESSIONAL COMPETENCIES
• Legal/privacy background and good understanding of privacy programs and implementation
• Strong knowledge of data protection laws and risk management methodology
• Solid writing and presentation skills
• Solid communication skills
• Strong leadership skills in remote and cross-functional teams
• Ability to establish professional networks
• Ability to draft policies, procedures and effective training programs
• Ability to work well with all levels of the organization on a regional and global level and ability to influence senior stakeholders.
CORE COMPETENCIES
• Leadership: Establishes and drives framework for local Business enabling it to take accountability for a responsible use data. Influences without authority
• Problem Solving: Must be able to identify and navigate complex issues in rapidly changing regulatory environment and prioritize tasks
• Business Understanding: Clear understanding of business priorities and implications of different solutions to data privacy and AI issues in the pharmaceutical/healthcare context
• Results Focus: Make real-time decisions and ensure prompt resolution of regulatory and legal issues
• Communication: Have strong communication skills enabling effective communication with all levels inside and outside of organization and with different professional backgrounds.
Business Unit
SPL
Location
Utd.Arab Emir.
Site
Dubai
Company / Legal Entity
Novartis Pharma Services AG
Functional Area
Legal & Intellectual Property & Compl.
Job Type
Full Time
Employment Type
Regular
Shift Work
No
