Associate Director- Compliance

Job description

Job Title: Associate Director- Compliance GCL: F Introduction to role: Are you ready to shape how a digitally powered, science-led organisation keeps its promises on ethics, privacy and responsible AI? Could you turn complex, fast-moving regulatory and technology risk into clear, actionable guidance for leaders and teams? In this pivotal role, you will be the primary compliance advisor to site leadership, embedding integrity and privacy-by-design into how we build and run technology. You will ensure the Chennai site operates to world-class standards aligned with our global strategy, while also serving as the first point of contact for the Bangalore hub. Your work will safeguard patients, protect data, and enable teams to innovate with confidence. Accountabilities: • Site Compliance Leadership: Serve as the primary contact and internal expert for site compliance matters in Chennai, with support to Bangalore; manage external reporting to regulatory and law enforcement agencies when required. • Senior Leader Engagement: Influence and coach senior leaders across Chennai and Bangalore to embed compliance expectations into strategy, operations and decision-making. • Programme Design and Delivery: Ensure effective compliance programmes exist across all relevant policy areas; design and implement policies, processes, training and support that measurably improve behaviours and outcomes. • Risk Management and Prioritisation: Identify, assess and prioritise the most material compliance risks across sites; direct resources to the highest-impact actions. • Assurance, Reporting and Audits: Partner with the local Assurance function to implement robust reporting, monitoring and auditing; track effectiveness and close gaps with clear owners and timelines. • Investigations and Disciplinary Process: Identify matters requiring follow-up or investigation; conduct or refer investigations as appropriate and partner with HR on consistent, fair disciplinary actions. • Training and Culture: Drive efficient rollout and tracking of centrally driven required training; lead the local Compliance Champion network and act as an ambassador for compliance across the site. • Cross-Functional Collaboration: Collaborate with HR, Finance, Procurement and other second-line functions on programme build and implementation to simplify compliance for teams. • Data Privacy Stewardship: Serve as the local point of contact for data privacy; in collaboration with the India ddpo and global privacy guides, provide first-line advisory support and decision gmentorship • Privacy by Build in Technology: Conduct and support Data Protection Impact Assessments for new technology initiatives, system implementations, data migrations, and deployments involving artificial intelligence and machine learning; maintain Records of Processing Activities for site technology functions. • Global Alignment: Partner with the Global Privacy Office/DPO to align local practices with global privacy strategy and standards. • Third-Party and Cloud Risk: Provide privacy input into vendor and third-party assessments for technology suppliers, cloud providers and AI/ML service partners. • Digital Legal Risk Advisory: Advise IT leadership on cyber security laws, data localisation requirements and AI governance obligations; ensure teams seek advice on sanctions, export controls and jurisdictional restrictions relevant to AI deployment and technological applications. • Support the AI oversight function by assessing high-risk or novel AI use cases. Advise on fairness, transparency, explain-ability, and human oversight as they relate to privacy and compliance. • Committee Liaison: Act as the site-level liaison to the Digital Risk & Oversight Committee and the AI Governance Committee; advance issues and foster back decisions to local teams to drive consistent execution. Essential Skills/Experience: • Academic degree (Law, Business, Technology, or related field) • 7+ years' experience in compliance, data privacy, or legal roles — with demonstrable expertise in at least one of: data protection law, corporate compliance, or digital/technology risk • Experience and understanding of compliance issues in the biopharmaceutical, healthcare, or technology industry, or an industry for which compliance is critical • Demonstrated efficiency operating in sophisticated organisational and regulatory environments — comfortable navigating matrix structures and multiple reporting lines • Strong advocacy skills and sound business judgment — able to translate legal/regulatory requirements into practical business mentorship • Demonstrated ability to partner effectively with technology leaders, data scientists, and engineering teams on sophisticated privacy and compliance issues • Shown project management skills — ability to frame and build a site plan, identify resourcing requirements, and measure success • Strong problem-solving skills — able to assess novel situations (particularly at the intersection of AI, privacy, and compliance) and provide pragmatic advice • Strong networker — internally and externally; able to build trust and influence without direct authority Desirable Skills/Experience: • CIPP/E, CIPP/A, CIPM, or equivalent privacy certification desirable • Working knowledge of data protection regulations — particularly GDPR and India's DPDP Act; ability to apply privacy principles to technology and data-driven environments desirable • Biopharmaceutical or other regulated proven experience helpful • Strong commercial skills, possibly legally qualified (admitted lawyer or equivalent) • Experience with India's regulatory landscape — IT