Privacy Officer & Counsel

About the role

Sanofi is seeking a Privacy Officer and Counsel to lead its US privacy compliance efforts. The role combines legal advisory responsibilities with operational oversight of data protection, breach notification, and privacy risk management across the company’s projects, including mergers and acquisitions.

Key responsibilities

• Serve as internal privacy counsel for the US market, guiding privacy compliance for M&A, corporate integrations, and innovation projects.
• Act as the primary contact for privacy integration roadmaps for acquired entities.
• Conduct privacy diligence assessments, gap analyses, and data privacy impact assessments.
• Manage breach investigations, reporting, and remediation in line with regulatory requirements.
• Maintain accurate documentation of data processing activities for audit purposes.

Required profile

• Juris Doctorate (JD) from an accredited law school, preferably focused on data privacy or cybersecurity.
• Valid US law license.
• In‑depth knowledge of U.S. state and federal privacy laws (CCPA, HIPAA) and familiarity with GDPR and emerging AI regulations.
• Experience observing legal and policy developments affecting privacy practice.
• Prior experience in privacy, AI, breach notification, or cybersecurity law, preferably within a law firm or healthcare setting.

Required skills