Hybrid Head of Data Privacy and AI, Europe

at Novartis

• Job title: Head of Data Privacy and AI, Europe
• Job type: Full Time
• Experience level: Lead
• Salary: Not specified
• Degree requirement: Bachelor's Degree
• Tech skills: Cyber Security
• Location requirements: Hybrid, Barcelona, Spain

About the role

• Head of Data Privacy and AI Europe Legal focused on compliance with regulations across Europe. Lead policy development and legal guidance for AI and data privacy matters.

Responsibilities

• Support the development, implementation, and maintenance of data privacy and AI policies and procedures to ensure a responsible use of AI, protect personal data in Europe.
• Track evolving global data privacy and AI laws (e.g., EU AI Act, OECD AI principles, US AI laws, UK DPDI) and translate requirements into actionable guidance.
• Provide and organize expert legal advice and guidance on data privacy and AI use cases to internal stakeholders, including senior management, ERC, IT, and P&O.
• Manage outside counsel for advice on data privacy and AI legal issues in Europe as needed.
• Support the identification and mitigation of data privacy, AI and cybersecurity risks conducting regular assessments in close collaboration with DPDAI, IT and business teams.
• Support the development and delivery of training programs to educate employees on data privacy and AI best practices and legal requirements.
• Lead and support the legal response to, date privacy data breaches and AI-related incidents (including in cybersecurity incidents), ensuring timely and effective resolution.
• Collaborate with cross-functional teams, including ERC, IT, security, P&O, Legal and business to ensure an integrated approach to data privacy and AI.

Requirements

• University degree in law; admission to the bar highly preferred.
• Proven working experience on data privacy, including in cybersecurity matters, AI (in particular in relation to the EU AI Act) and ethics in a multi-disciplinary and international setting.
• Significant experience assessing AI systems from a legal and compliance perspective (including risk categorization, audit requirements, transparency obligations, and lifecycle governance).
• Relevant certifications such as certifications related to AI ethics, compliance, and CIPP/E, CIPM are required.
• Proficiency in English (written and spoken).

Benefits

• Commitment to Diversity and Inclusion
• Flexible working arrangements