Director, International Privacy Lead and Data Protection Officer

<p><strong>Director, International Privacy Lead &amp; Data Protection Officer</strong></p> <p>&nbsp;</p> <p><strong>Overview</strong></p> <p>Alnylam is seeking an experienced privacy and data protection leader to serve as Director, International Privacy Lead &amp; Data Protection Officer. Reporting to the Senior Director, Head of Privacy, AI Governance, Training &amp; Communications within Ethics &amp; Compliance, this role will lead Alnylam’s international privacy program, with primary responsibility for Europe (EU/EEA, United Kingdom, and Switzerland) and support for broader international markets.</p> <p>As Alnylam’s formally appointed Data Protection Officer (DPO) under applicable European and Swiss privacy laws, the Director will provide independent privacy oversight, advise the business on data protection obligations, and maintain direct access and escalation channels to senior leadership for material privacy risks.</p> <p>This individual contributor will be expected to serve as a proactive partner to the our international business, anticipating privacy and data protection obligations driven by regulatory change and business growth, and translating those requirements into actionable guidance for policies, operations and ways of working.</p> <p>The successful candidate will partner closely with Legal, Information Security, IT, HR, Commercial, Medical Affairs, Clinical Development, Pharmacovigilance, Procurement, Ethics &amp; Compliance, and other business stakeholders to enable responsible use of personal data while strengthening privacy governance, risk management, and business adoption across international markets.</p> <p>Hybrid role preferably based in Zug, Switzerland.&nbsp;Also open to candidates based in Madrid, Spain or Maidenhead, UK.</p> <p>&nbsp;</p> <p><strong>Responsibilities</strong></p> <ul> <li>Lead and mature Alnylam’s international privacy program, with primary focus on Europe and support for broader international markets, by setting program priorities, strengthening governance frameworks, and ensuring privacy requirements are embedded into business planning, policies, controls, and day-to-day operations.</li> <li>Serve as Alnylam’s appointed DPO under EU GDPR, UK GDPR, and applicable Swiss data protection requirements, providing independent advice, monitoring compliance, maintaining required independence, and acting as the primary point of contact for supervisory authorities and data subjects.</li> <li>Oversee privacy risk identification, assessment, mitigation, monitoring, and escalation processes, including privacy-by-design and privacy-by-default requirements, DPIAs, TIAs, Records of Processing Activities (ROPA), cross-border transfer assessments, and related governance documentation.</li> <li>Advise business and functional leaders on privacy requirements related to clinical research, pharmacovigilance, commercial operations, medical affairs, human resources, patient support programs, real-world evidence, AI, and other data-driven initiatives.</li> <li>Partner with Information Security, Legal, Procurement, and business stakeholders on privacy incident response, breach assessment, third-party privacy risk management, data protection terms, data sharing arrangements, remediation, and regulatory notification decisions.</li> <li>Proactively monitor the European and international privacy, AI, digital, cyber and data governance legislative landscape, anticipating compliance impacts from business growth and regulatory change, and rapidly translating new or changing requirements into practical updates to policies, controls, business processes, training, and operational guidance.</li> <li>Develop and deliver privacy training, communications, awareness initiatives, metrics, monitoring activities, and continuous improvement plans that promote a culture of privacy and accountability across international markets.</li> </ul> <p>&nbsp;</p> <p><strong>Qualifications</strong></p> <p><strong>Required</strong></p> <ul> <li>Juris Doctor (JD), LLM, or other advanced legal degree required.</li> <li>12+ years of privacy legal or compliance experience at a law firm and/or in-house.</li> <li>Significant experience advising on privacy risk in regulated life sciences settings, including clinical research, pharmacovigilance, medical affairs, commercial, HR, patient-facing, and digital activities.</li> <li>Experience serving as a DPO or advising in an equivalent independent oversight capacity for GDPR, UK GDPR, Swiss FADP, or comparable privacy regimes.</li> <li>Deep understanding of GDPR, UK GDPR, Swiss FADP, international data transfer requirements, and global privacy regulations.</li> <li>Experience advising on AI, data-driven innovation, real-world evidence, cross-border data use, and other strategic privacy initiatives.</li> <li>Strong privacy governance and risk management experience, including the ability to set priorities, mature program controls, and translate complex requirements into practical guidance for technical and non-technical audiences.</li> <li>Strong executive communication, stakeholder management, and influencing skills, with the credibility and judgment to engage senior leaders, regulators, external partners, and cross-functional stakeholders.</li> <li>Proven ability to lead complex privacy initiatives across matrixed, international organizations, applying practical and proportionate judgment to ambiguous issues.</li> <li>Executive presence, regulatory credibility, and strategic judgment to anticipate legal, business, and technology shifts and translate them into clear priorities for the international privacy program.</li> </ul> <p><strong>Preferred</strong></p> <ul> <li>Privacy certifications such as CIPP/E, CIPM, CIPT, AIGP, or similar credentials preferred.</li> <li>Experience interacting directly with European data protection authorities and regulators preferred.</li> <li>Experience leading multinational privacy teams or global privacy programs preferred.</li> <li>