Dir, Priv & Data Protection Officer APAC

At Johnson & Johnson, we believe health is everything. Our strength in healthcare innovation empowers us to build a world where complex diseases are prevented, treated, and cured, where treatments are smarter and less invasive, and solutions are personal. Through our expertise in Innovative Medicine and MedTech, we are uniquely positioned to innovate across the full spectrum of healthcare solutions today to deliver the breakthroughs of tomorrow, and profoundly impact health for humanity. Learn more at jnj.com . As guided by Our Credo, Johnson & Johnson is responsible to our employees who work with us throughout the world. We provide an inclusive work environment where each person is considered as an individual. At Johnson & Johnson, we respect the diversity and dignity of our employees and recognize their merit. Job Function: Legal & Compliance Job Sub Function: Law Business Partners Job Category: Professional All Job Posting Locations: North Ryde, New South Wales, Australia, Singapore, Singapore Job Description: DePuy Synthes is recruiting for a Director, Privacy Officer & DPO, APAC, located in Singapore, Central Singapore OR North Ryde, Austrailia This role serves as the senior privacy leader for DePuy Synthes in the region, with accountability for privacy governance and formal Data Protection Officer (DPO) duties. The Director, Privacy Officer & DPO provides strategic leadership to ensure compliance with global and local data protection laws while enabling responsible innovation across a complex medical technology organization. This role has significant enterprise impact, partnering closely with Legal, IT, Security, Health Care Compliance, HR, Commercial, Clinical, Medical Safety and HEMA, and R&D teams to embed privacy‑by‑design across business operations and digital products.

Lead the implementation and ongoing oversight of the DePuy Synthes privacy program in the region, ensuring alignment with applicable local and regional data protection laws and regulations.  Advise business partners on privacy and data protection requirements in all stages of R&D, product development, commercialization, clinical trials, HEMA activities and lifecycle management.   Serve as the designated Data Protection Officer (DPO), acting as an independent advisor on data protection obligations and risk management.  Lead efforts to embed privacy capabilities in named privacy stewards from relevant functions, including handling escalations, driving consistency and delivering ongoing training and education to the stewards.  Identify any required regional-specific variants from global privacy policies, standards, and procedures to support compliant collection, use, transfer, and retention of personal data in the region.  Provide strategic guidance to business leaders on privacy risks associated with new products, digital health solutions, clinical activities, and commercial initiatives.  Oversee regional privacy impact assessments, data transfer assessments, and mitigation plans for high‑risk processing activities.  Partner with Information Security and Legal teams to support incident response, breach management, and regulatory communications in the region when required.  Lead privacy training and awareness programs to strengthen a culture of data protection and accountability across the organization.  Monitor regional regulatory developments and emerging privacy risks, translating requirements into practical business guidance.  Maintain external relationships with regional regulators and internal stakeholders to support audits, inquiries, inspections and data incident responses in conjunction with cross-functional partners.  Provide support for data contracting processes, including for escalations.

Education  Bachelor’s degree required, preferably in Law, Information Systems, Business, or a related field.  Advanced degree (JD, LLM, MBA, or equivalent) preferred.