Director, Privacy Officer & DPO, APAC (MedTech)

Location: Hybrid role based in Singapore, Singapore, or North Ryde, New South Wales, Australia; up to 20% international travel.

Company

Johnson & Johnson MedTech develops healthcare and medical technology solutions, with this role supporting the DePuy Synthes business.

What you will do

• Lead implementation and oversight of the regional privacy program across applicable local and regional data protection laws.
• Serve as the designated Data Protection Officer and provide independent advice on data protection obligations and risk management.
• Advise Legal, IT, Security, HR, Commercial, Clinical, Medical Safety, HEMA, and R&D partners across product development, clinical trials, commercialization, and lifecycle management.
• Embed privacy-by-design practices, manage privacy stewards, and lead training and awareness programs.
• Oversee privacy impact assessments, data transfer assessments, mitigation plans, incident response, breach management, and regulatory communications.
• Monitor regulatory developments, support audits and inspections, maintain regulator relationships, and advise on data contracting.

Requirements

• Bachelor’s degree in Law, Information Systems, Business, or a related field.
• 10–12 years of progressive experience in privacy, data protection, cybersecurity, or related legal roles, including leadership responsibility.
• Experience serving as or supporting a Data Protection Officer in a regulated environment.
• Experience with privacy and data protection regulations in healthcare, including GDPR and APAC privacy frameworks.
• Experience partnering with technology, security, and digital teams on privacy-by-design initiatives.
• Fluency in English is required; experience with at least one additional regional language is expected.

Nice to have

• Advanced degree such as JD, LLM, MBA, or equivalent.
• Privacy experience in medical devices, MedTech, life sciences, pharmaceutical, healthcare insurance, or healthcare systems.
• Privacy certifications such as CIPP/E, CIPP/A, or CIPM.
• Experience with regulators, supervisory authorities, and multi-jurisdictional privacy programs.
• People leadership or program leadership experience.

Culture & Benefits

• Inclusive work environment focused on employee diversity, dignity, and equal opportunity.
• Cross-functional work across Legal, IT, Security, Compliance, HR, Commercial, Clinical, Medical Safety, HEMA, and R&D.
• International scope across the APAC region.
• Hybrid work arrangement with international travel of up to 20%.