Regional Privacy Counsel – APAC

About the role

Bristol Myers Squibb is seeking an experienced and strategic Regional Privacy Counsel to lead data‑privacy compliance across the Asia‑Pacific region. You will act as the primary legal advisor on privacy matters, partnering with Commercial, Medical Affairs, IT, HR and other functions to enable innovative business operations while safeguarding personal data.

Key responsibilities

• Serve as the subject‑matter expert on data‑privacy laws across APAC jurisdictions, including China, Japan, South Korea, India, Singapore, Australia, New Zealand, Hong Kong and Southeast‑Asia countries.
• Advise business partners on privacy risks and legal obligations for new and existing initiatives.
• Collaborate with the Global Privacy Compliance Director to align regional compliance programs with global standards.
• Conduct Privacy Impact Assessments (PIAs) and Data Protection Impact Assessments (DPIAs) and maintain Records of Processing Activities (RoPA) for APAC entities.
• Monitor regulatory developments and update internal policies, procedures and controls accordingly.
• Guide cross‑border data‑transfer mechanisms, negotiate DPAs, vendor contracts and data‑sharing arrangements.
• Develop and deliver region‑specific privacy training and foster a culture of privacy accountability.
• Support privacy incident response and triage as needed.

Required profile

• Legal professional with substantial experience in data‑privacy and protection law.
• Demonstrated ability to advise multinational business units on complex privacy issues.
• Strong analytical and communication skills, capable of translating legal requirements into practical guidance.
• Experience working across multiple APAC jurisdictions and familiarity with their regulatory frameworks.

Required skills

What we offer

• Competitive benefits and programs supporting work‑life balance.
• Opportunities to work on high‑impact projects within a global biopharma leader.
• Collaborative environment with diverse, high‑performing teams.