Data Protection Officer

Job Title: Data Protection Officer (DPO)/ Privacy Lead — Life Sciences / BiotechReports To: Chief Technology OfficerEmployment Type: Full-time / C2HWorkplace Type: RemoteTimings: Overlap required with Europe/USA time-zone as per the work requirementsTHE CELITO TEAM The Celito Team architects the buildout of simplified, integrated, and compliant technology stacks. With both consulting and products, our expertise can help our customers save time and money as they move from strategic Clinical & Quality management all the way to widespread and profitable commercialisation.JOB OVERVIEW We are looking for an experienced Data Protection Officer (DPO) / Privacy Lead to develop and manage our DPO-as-a-Service offering for biotech, pharma, and digital health companies. This role will serve as the operational and advisory privacy lead for multiple client organisations, assisting them in designing, implementing, and maintaining compliant privacy programs under GDPR, CCPA/CPRA, HIPAA (as applicable), and Indian data protection laws. This is a client-facing, hands-on role, involving active management of DPIAs, RoPAs, vendor assessments, breach responses, regulator coordination, and ongoing compliance operations for global life sciences customers. Collaboration with security, quality, IT, legal, and clinical operations teams across geographies will be essential.KEY RESPONSIBLIITIES Core DPO / Privacy Operations:Serve as acting or virtual DPO for multiple client organisations.Own and maintain Records of Processing Activities (RoPA), Data Protection Impact Assessments (DPIAs), Legitimate Interest Assessments (LIAs), data flow maps, and transfer registers.Advise on lawful basis, consent, and data minimisation practices.Design and run privacy governance models for clients.Regulatory Compliance:Ensure compliance with GDPR / UK GDPR, CCPA / CPRA, HIPAA (where applicable), and India DPDP Act.Monitor regulatory changes and proactively advise clients.Support audits, inspections, and regulator inquiries.Third-Party & Vendor Privacy:Review and approve vendors, sub-processors, and data transfers.Perform privacy risk assessments for CROs, SaaS vendors, labs, and partners.Support SCCs, TIAs, and cross-border transfer mechanisms.Incident & Breach Management:Support breach assessment, impact analysis, notification obligations, and regulator communications.Coordinate with legal, security, and executive teams during incidents.Client Advisory & Enablement:Act as a trusted advisor to client leadership (Legal, IT, Security, Clinical, Compliance).Provide training, awareness, and guidance to client teams.Translate regulatory requirements into practical operational actions.Internal Contribution:Help develop reusable privacy accelerators, templates, and operating models.Contribute to sales, scoping, and client onboarding for DPO-as-a-Service.QUALIFICATIONS 7+ years of experience in privacy, data protection, compliance, or risk roles.Strong hands-on experience with GDPR operationalisation, not just theory.Experience working with EU, US, and/or Indian regulatory environments.Prior experience acting as DPO, privacy lead, or equivalent function.Ability to work with legal, security, IT, quality, and clinical stakeholders.Strong documentation, analytical, and communication skills.Comfortable working with multiple clients in a managed services model.Nice-to-Have / Strongly Preferred:Life sciences, healthcare, or regulated industry experience (biotech, pharma, med-tech, digital health).Experience with clinical trial data, patient data, and CRO / sponsor models.Certifications such as CIPP/E, CIPM, CIPT, ISO 27701 Lead Implementer / Auditor.Prior consulting or managed services experience.Why This Role Is Unique:You will build and operate privacy programs, not just check compliance boxes.You will work with innovative biotech and digital health companies that are shaping healthcare.You will help define new DPO-as-a-Service/Privacy accelerators and service offerings, not just support them.

Apply Now