What You Will Achieve

As a member of the GCP risk management team, you will drive data protection and privacy controls across Research and Development (R&D) functions. You will act as a liaison between the business functions and the Global Privacy Office and Global Privacy Operations by championing privacy initiatives and activities, driving privacy compliance operations and serving as a trusted privacy advisor for business representatives across R&D within Pfizer Research & Development and Pfizer Oncology Division.

How You Will Achieve It

• Serve as the main privacy point of contact for R&D colleagues for privacy related matters

• Drive privacy-related activities, operations and risk management within the R&D organization

• Serve as a trusted advisor for colleagues and a liaison between the business process owners, local legal teams and the Global Privacy Office for privacy-related operational activities.

• Work directly with business process owners to facilitate inventory maintenance, activity assessments (AAs), data protection impact assessments (DPIAs) and risk mitigation processes, including maintaining, communicating, and driving compliance with organizational privacy policies

• Partner with Vendor Leads and Third Party Quality Leads for data privacy aspects of vendor assessments

• Provide R &D perspective to the GPO related to developing and maintaining privacy policies, standards, guidelines.

• Promote privacy culture and awareness across R&D

• Support Pfizer’s Privacy by Design process by providing feedback and guidance to business process and system owners, including related to understanding and implementing recommended privacy controls

• Assist the business with the completion and maintenance of Inventory Records for processing activities that handle personal data

• Assist with responding to individual rights requests, including validating the identity of the requestor, confirming the request should be executed, triaging, responding to the requestor, etc.

• Support the business with completion of Data Protection Impact Assessment (DPIA)questionnaires for clinical business processes, including remediation of identified process risks

• Generate and analyze data privacy metrics to manage compliance; generate data privacy reports for the Global Privacy Office and leadership.

• Manage change necessary to achieve privacy compliance objectives and maintain a data privacy culture across the organization, considering cultural l and legal requirement differences

• Other ongoing day-to-day operational activities required to support the management of an effective privacy program including creating reports and documentation, improving tool s and processes

Nice-to-Have

• Master’s degree and relevant pharmaceutical clinical development experience including quality.

• Substantial understanding of data privacy legal and regulatory requirements and ability to interface with business and information technology colleagues to drive privacy controls into business operations

• Strong project management skills

• Knowledge of good clinical practices and associated regulatory requirements.