Associate Vice President, Chief Privacy Officer

This role will be the Chief Privacy Officer as well as a member of the Legal Compliance team within Agilent's Legal Department. The key expectations for this role include:

• An individual dedicated and motivated to drive operational excellence in Agilent's compliance with global data protection and privacy laws, excelling in developing close partnerships with business teams and senior management. This individual understands the drivers for growth and enhances decision-making processes to promote best practices when handling personal and sensitive data.
• The Chief Privacy Officer must lead and inspire the Data Protection and Privacy team to develop and mature Agilent's strategy for complying with global, regional, and local privacy, data protection, cybersecurity, and artificial intelligence (AI) laws and regulations. This strategy should be based on principles and a risk-based approach that focuses on enabling Agilent's business.
• Additionally, the Chief Privacy Officer is a critical leader within the Legal Compliance team and Legal Department, working collaboratively with the Chief Compliance Officer. This role provides compliance leadership, clear guidance, training, and tools to internal partners on specific areas of need.

Working with Agilent's Chief Compliance Officer and other key stakeholders, the Chief Privacy Officer is responsible for the vision, strategy, management, and operations of Agilent's global Data Protection & Privacy Program, including support of employees and business partners in compliance with laws, regulations and industry standards surrounding data protection, privacy and AI. In addition, this role will support the Legal Compliance program and offer subject matter legal expertise on compliance issues, supporting the organization's policies, Standards of Business Conduct, and values.

As a leader within Legal Compliance and the overall Legal Department, the successful candidate will demonstrate their ability to:

• Create clarity by providing clear, easy, actionable and risk-based advice to the business.
• Generate energy and optimism highlighting how data protection and privacy can be leveraged as business enablers.
• Deliver success by aligning closely with business leaders and company objectives.
• Demonstrate presence as a empathetic and growth focused leader to their team and overall Legal Department.

Responsibilities: As Chief Privacy Officer your responsibilities will include:

• Providing a strategy, framework, vision, and leadership for the global Data Protection & Privacy team with a risk-based principles-based approach with a global, regional, and local set of policies, tools, and resources.
• Establishing strong partnerships with cross-functional partners to enable a unified approach to data protection in Agilent, particularly with Agilent's Information Security & Risk Management team, Information Technology organization, and Human Resources.
• Monitoring privacy, data protection, cybersecurity, AI and related laws and regulations and evaluating their potential impact on Agilent.
• Taking initiative to develop a clear understanding of company products, businesses, and planned modifications and growth to assist in developing global, regional and local privacy/compliance strategies, policies and tools.
• Overseeing the Data Protection & Privacy team in guiding the business to understand what privacy and data protection should mean to them and their responsibilities.
• Supporting Internal Audit investigations and effective resolution of audit findings as it relates to data protection, privacy and AI.
• Providing legal support to Information Security & Risk Management regarding the legal impact and reporting requirements related to information security incidents. Participate and contribute to joint training and policy development as it relates to Acceptable Use, Data Loss and Information Security.
• Partnering closely with Information Security & Risk Management, Intellectual Property and Litigation colleagues on data loss prevention in terms of incident support, triaging, policy development including with regard to handling of confidential information, training and awareness raising.
• Supporting mergers, acquisitions and divestitures Legal work, specifically to lead due diligence and integration efforts as it relates to data protection, privacy, records management and AI.
• Developing and delivering compelling training and communications to the teams on privacy, data protection and records and information management, which are clear, easy and actionable (with sprinkles of fun!).
• Partnering with key stakeholders to develop alignment on records and information management strategy, policy and practices.
• Providing input on data protection and privacy contractual clauses for customer, supplier, healthcare professional, channel partner, employee and other contracts as may be required, and assist in the negotiation of key contract terms, as needed.
• Managing and overseeing all operational aspects of the Data Protection & Privacy program including data subject requests, data protection impact assessments, data flow and process mapping, security incident notifications, investigations, policies, registrations, trainings, contracts, program audits, program certifications, monitoring of legal updates, and dashboard reporting.
• Acting as a key member of the Legal Compliance team providing subject matter support beyond Data Protection & Privacy in other areas of compliance where there are global, regional or locally relevant regulations such as Anti-Bribery, Anti-Corruption, Fraud & Abuse, Healthcare Compliance, Channel and Supplier Management, Conflict of Interests, and other areas as needed.

* J.D. or equivalent degree from an accredited law school and a license in good standing to practice law.

* Minimum of 8 years of legal experience, including at least four years of substantive privacy law experience. Proficiency in GDPR, US and China privacy and data protection compliance requirements is required. Experience with Latin America and broader Asia-Pacific privacy laws is a preferred.

* CIPP/US or CIPP/EU certification is preferred; privacy certification is expected within the first year of employment.

* Knowledge of regulations impacting the collection and use of patient and genetic data is a strong plus.

* Legal compliance experience beyond privacy is a strong plus, particularly in areas such as Anti-Bribery/Anti-Corruption, Supplier Management, and/or Channel Partner Management.

* Excellent communication and influencing skills - comfort in public speaking is a must.

* Strong negotiation skills with the capacity to influence outcomes.

* Strong sense of integrity and ability to work collaboratively within a matrixed organization.

* Experience working with teams across multiple regions (e.g., Asia, Europe, and the Americas) is essential. The candidate must demonstrate the ability to drive strategic initiatives and compliance results globally.

* Proficiency in information technology; experience using OneTrust is preferred.

Additional Considerations:

* Experience with AI regulations: Given the increasing importance of AI in privacy and data protection, familiarity with AI-related legal matters and regulations, such as the EU AI Act, would be beneficial.

* Leadership and strategic planning skills: The ability to lead a team, engage with stakeholders at all levels, and communicate complex privacy issues effectively.

#LI-PK1

Additional Details