Data Protection Officer

Job description

At Roche you can show up as yourself, embraced for the unique qualities you bring. Our culture encourages personal expression, open dialogue, and genuine connections, where you are valued, accepted and respected for who you are, allowing you to thrive both personally and professionally. This is how we aim to prevent, stop and cure diseases and ensure everyone has access to healthcare today and for generations to come. Join Roche, where every voice matters. The Position Job Title: Data Protection Officer (DPO) Reports To: Director of Legal and Compliance (Senior Leadership Team) Location: Burgess Hill, UK About the Role We are seeking an experienced, high-visibility Data Protection Officer (DPO) to lead our privacy compliance strategy and champion a strong data protection culture. Operating with complete statutory independence, you will serve as the primary advisor to the Senior Leadership Team (SLT), direct our local privacy framework, and oversee high-impact digital health and AI initiatives. You will lead the Local Privacy Office, line manage the Data Privacy Manager, and serve as our designated point of contact for regulators and data subjects. Key Responsibilities Strategic Leadership & Independence: Operate with statutory independence to set the position of the Local Privacy Office, advise senior leadership, and promote data privacy at the highest management levels. Regulatory Oversight: Act as the formal, designated contact point for regulators (ICO and ROI Data Protection Commission) and data subjects. Manage formal inquiries and data subject requests. Risk Management & DPIAs: Provide risk-based guidance on high-impact technology, special category data, and digital health initiatives. Provide final sign-off on Data Protection Impact Assessments (DPIAs). Breach Response & Reporting: Solely authorize, oversee, and direct the reporting of personal data breaches to regulatory authorities and affected data subjects. Team & Framework Management: Line manage and mentor the Data Privacy Manager while coordinating the Local Privacy Office. Oversee compliance monitoring, internal audits, and frameworks (ISO27001, CyberEssentials Plus, DSPT). Key Relationships Internal: Affiliate Legal & Compliance Department, Senior Leadership Team (SLT), Group Privacy stakeholders, Data Privacy Liaisons, and IT/Cybersecurity teams. External: Information Commissioner's Office (ICO), Data Protection Commission (ROI), data subjects, and trade bodies. Qualifications & Experience Essential Criteria: Relevant Degree Proven track record delivering data privacy compliance frameworks within a complex organization. Deep knowledge of UK GDPR, EU GDPR, and the Data Protection Act 2018. Leadership experience managing teams, projects, and influencing matrix stakeholders. Experience with emerging technologies (e.g., AI), digital health, and information governance systems (e.g., ISO27001). Strong risk analysis, analytical, project management, and communication skills. Desirable Criteria: CIPP (Certified Information Privacy Professional) or recognized privacy qualification. Core Competencies & Values Roche Core Values: Integrity, Courage, and Passion. Decision Making & Expertise: Independent judgment, commercial awareness, and healthcare/IT sector awareness. Leadership & Collaboration: Ability to inspire, coach junior team members, navigate change, and foster open communication under pressure. Who we are A healthier future drives us to innovate. Together, more than 100’000 employees across the globe are dedicated to advance science, ensuring everyone has access to healthcare today and for generations to come. Our efforts result in more than 26 million people treated with our medicines and over 30 billion tests conducted using our Diagnostics products. We empower each other to explore new possibilities, foster creativity, and keep our ambitions high, so we can deliver life-changing healthcare solutions that make a global impact. Let’s build a healthier future, together. The statements herein are intended to describe the general nature and level of work being performed by employees, and are not to be construed as an exhaustive list of responsibilities, duties, and skills required of personnel so classified. Furthermore, they do not establish a contract for employment and are subject to change at the discretion of Roche Products Ltd. At Roche Products we believe diversity drives innovation and we are committed to building a diverse and flexible working environment. All qualified applicants will receive consideration for employment without regard to race, religion or belief, sex, gender reassignment, sexual orientation, marriage and civil partnership, pregnancy and maternity, disability or age. We recognise the importance of flexible working and will review all applicants’ requests with care. At Roche difference is valued and we are proud to be an equal opportunity employer where you are encouraged to bring your whole self to work.