At Johnson & Johnson, we believe health is everything. Our strength in healthcare innovation empowers us to build a world where complex diseases are prevented, treated, and cured, where treatments are smarter and less invasive, and solutions are personal. Through our expertise in Innovative Medicine and MedTech, we are uniquely positioned to innovate across the full spectrum of healthcare solutions today to deliver the breakthroughs of tomorrow, and profoundly impact health for humanity. Learn more at jnj.com.
As guided by Our Credo, Johnson & Johnson is responsible to our employees who work with us throughout the world. We provide an inclusive work environment where each person is considered as an individual. At Johnson & Johnson, we respect the diversity and dignity of our employees and recognize their merit.
Job Function:
Legal & ComplianceJob Sub Function:
Enterprise ComplianceJob Category:
ProfessionalAll Job Posting Locations:
Shanghai, ChinaJob Description:
DePuy Synthes is recruiting for a Privacy Manager, located in Shanghai, China.
The Privacy manager of DePuy Synthes in China is responsible for implementing and overseeing the privacy compliance program for all DePuy Synthes activities in China, identifying privacy risks and developing policies and procedures, training, and controls to ensure DePuy Synthes is operating in compliance with applicable local privacy laws as well as DePuy Synthes global privacy program.
In this role, the privacy manager will have the opportunity to actively support and shape all projects related activities of DePuy Synthes in China that involve privacy considerations, providing strategic advice to ensure compliance with local data protection laws while enabling responsible innovation across a complex medical technology organization.
In this position, the individual shall serve towards the authorities as the designated Personal Information protection officer for DePuy Synthes entities in China.
The position will have a direct line of reporting to the Asia Pacific Data protection Officer.
Key Responsibilities
- Lead the implementation and ongoing oversight of the DePuy Synthes global privacy program in China, identifying privacy risks and developing policies and procedures, training, and controls to ensure alignment with applicable local data protection laws and regulations as well as the DePuy Synthes global privacy program.
- Advise business partners and key functional partners on privacy and data protection requirements associated with new products, digital health solutions, clinical activities, and commercial initiatives, to ensure privacy by design is embedded across business operations and digital products.
- Serve towards the authorities as the designated Personal Information protection officer for DePuy Synthes entities in China and fulfil related obligations.
- Lead efforts to embed privacy capabilities in named privacy champions from relevant functions, including handling escalations, driving consistency and delivering ongoing training and education to the champions in China.
- Oversee local privacy impact assessments, cross border data transfer filings, and mitigation plans for high‑risk processing activities.
- Partner with Information Security and Legal teams to support incident response, breach management, and regulatory communications in China when required.
- Lead privacy training and awareness programs to strengthen a culture of data protection and accountability across the organization.
- Monitor regulatory developments and emerging privacy risks, translating requirements into practical business guidance, identifying any required regional-specific variants from global privacy policies, standards, and procedures to support compliant collection, use, transfer, and retention of personal data in China.
- Maintain external relationships with China regulators and internal stakeholders to support audits, inquiries, inspections and data incident responses in conjunction with cross-functional partners.
Qualifications
Education
- Bachelor’s degree required, preferably in Law
- Advanced degree (JD, LLM, MBA, or equivalent) preferred.
Experience and Skills
- Minimum 6 to 8 years of experience in privacy, data protection legal roles, including in a complex global corporation or private practice.
- Specific data protection or privacy experience within medical devices, medtech, life sciences pharmaceutical industries or healthcare insurers or systems.
- Strong working knowledge of China privacy regulations (e.g., PIPL, CBDT, DSL) and their business application.
- Experience partnering with technology, security, and digital teams on privacy‑by‑design initiatives.
- Significant experience supporting and implementing China privacy program.
- Ability to maintain the highest standards of quality, compliance and accountability when advising the business.
- Ability to translate a wide variety of principles and, sometimes complex, legal requirements into actionable solutions for the business.
- Ability to work autonomously and in a remote team, with various stakeholders in a matrix environment.
- Strong negotiation and communication skills (both oral and written).
- Chinese native, Oral and written English proficiency, excellent drafting skills.
- Travel: Up to 10% international travel.
Johnson & Johnson is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, age, national origin, disability, protected veteran status or other characteristics protected by federal, state or local law. We actively seek qualified candidates who are protected veterans and individuals with disabilities as defined under VEVRAA and Section 503 of the Rehabilitation Act.
Johnson & Johnson is committed to providing an interview process that is inclusive of our applicants’ needs. If you are an individual with a disability and would like to request an accommodation, external applicants please contact us via https://www.jnj.com/contact-us/careers, internal employees contact AskGS to be directed to your accommodation resource.
#LI-Hybrid
#DePuySynthesCareers
Required Skills:
Preferred Skills:
Audit and Compliance Trends, Coaching, Compliance Management, Compliance Policies, Compliance Risk, Confidentiality, Consulting, Controls Compliance, Developing Others, Internal Auditing, Investigation Techniques, Legal Function, Legal Services, Policy Development, Process Improvements, Tactical Planning, Technical CredibilitySkills Required
- Bachelor’s degree, preferably in Law
- Advanced degree such as JD, LLM, MBA, or equivalent
- 6 to 8 years of experience in privacy or data protection legal roles
- Experience in a complex global corporation or private practice
- Privacy experience in medical devices, medtech, life sciences, pharmaceutical, healthcare insurance, or healthcare systems
- Strong working knowledge of China privacy regulations, including PIPL, CBDT, and DSL
- Experience partnering with technology, security, and digital teams on privacy-by-design initiatives
- Significant experience supporting and implementing a China privacy program
- Ability to advise on compliance, accountability, risk, and quality standards
- Ability to translate complex legal requirements into actionable business solutions
- Ability to work autonomously and in remote, matrixed teams
- Strong oral, written, negotiation, and communication skills
- Native Chinese and proficient oral and written English
- Excellent drafting skills
Johnson & Johnson Compensation & Benefits Highlights
The following summarizes recurring compensation and benefits themes identified from responses generated by popular LLMs to common candidate questions about Johnson & Johnson and has not been reviewed or approved by Johnson & Johnson.
-
Healthcare Strength — Healthcare coverage is characterized as comprehensive across medical, dental, and vision, with added supports like onsite clinics, fitness centers, and Employee Assistance resources. Mental-health services and wellbeing reimbursements are also described as meaningful components of the overall package.
-
Retirement Support — Retirement offerings are portrayed as a major differentiator, combining a 401(k) with employer matching and an employer-funded pension plan. Stock options and other long-term financial supports are also positioned as part of the broader rewards mix.
-
Parental & Family Support — Family-related benefits are presented as notably strong, including paid parental leave for all new parents and additional leave types for caregiving and bereavement. Financial assistance for adoption, fertility treatment, and surrogacy is highlighted as a significant support.
Johnson & Johnson Insights
What We Do
Profound Change Requires Boldness. Johnson & Johnson is the largest and most broadly based healthcare company in the world. We’re producing life-changing breakthroughs every day, and have been for the last 130 years. The combination of new technologies and your expertise enables amazing things to happen. Teams from J&J’s consumer business are creating digital tools to help people track the health of their skin. Those working in medical devices are 3-D printing artificial joints personalized for each patient, while researchers in pharmaceuticals use AI to discover lifesaving drugs. Imagine what the rest of our team of 134,000 people at 260 companies in more than 60 countries across the world is accomplishing. We redefine what it means to be a big company in today’s world. Social Media Community Guidelines: http://www.jnj.com/social-media-community-guidelines
