Thermo Fisher Scientific

Senior Privacy Specialist, Corporate Counsel

Thermo Fisher Scientific

full-time

Posted on:

Origin:  • 🇺🇸 United States • North Carolina

Visit company website
✨ AI Apply
Manual Apply

Job Level

Senior

Tech Stack

Unity

About the role

  • Maintain organizational consistency with privacy and data security regulations globally
  • Lead and take ownership of multiple projects; work independently and escalate concerns when appropriate
  • Provide clear, actionable legal guidance on global data protection laws and standards (GDPR, CCPA/CPRA, HIPAA)
  • Draft, review, and negotiate data protection terms in global agreements, including client/vendor contracts and BAAs
  • Identify and analyze potential privacy risks; assist in conducting DPIAs and risk evaluations
  • Collaborate on privacy-by-design initiatives for technology, digital health tools, and AI systems
  • Work with Legal, IT, and Commercial teams to integrate privacy into systems and processes
  • Advise on and manage subject access requests and individual rights lifecycle under applicable privacy laws
  • Support the HIPAA Privacy Officer in implementing and maintaining HIPAA-compliant policies, procedures, and training
  • Monitor legal developments and provide timely updates to business partners and legal colleagues
  • Share knowledge and develop standard methodology across the Global Privacy and Technology Office (GPTO)

Requirements

  • Juris doctorate degree or equivalent
  • Active license to practice law in at least one jurisdiction
  • Certifications such as IAPP (CIPP/E, CIPP/US, CIPM) desirable
  • Fluency in business English; proficiency in other languages a plus
  • 4–6 years of experience safeguarding information and upholding privacy laws
  • Preference for experience in a multinational corporation or regulated sector (pharmaceutical/clinical research)
  • Strong grasp of global privacy frameworks (e.g., GDPR, CCPA/CPRA, HIPAA) and data transfer mechanisms (SCCs, TIAs)
  • Experience performing/advising on DPIAs, TIAs, or HIPAA Security Risk Assessments
  • Proven skill coordinating complex projects with multiple collaborators across jurisdictions
  • Skilled in simplifying legal issues and presenting risk in business-friendly terms
  • Familiarity with privacy management platforms such as TrustArc or OneTrust
  • Self-starter with strong judgment, collaborative mentality, and passion for continuous learning